Information Security Engineer

Pay Range $86,000.00 - $ annually Salary offers are based on the candidate's equivalent experience and internal equity with other employees within the same job classification. This position is not eligible for overtime compensation.

Job Type Unclassified Department Enterprise Technology

The Information Security Engineer provides technical execution of the Information Security Program led by the Chief Information Security Officer. The Info Sec Program supports a Defense-in-Depth security model utilizing security tools, policies, procedures and practices to identify, manage, and reduce cybersecurity risks to the County. The Security Engineers work under the direction of the Enterprise Security Architects to implement and manage security controls within the County’s data systems and infrastructure.

Are you looking for a career in a dynamic organization that embraces a can-do spirit? Look no further than Maricopa County’s Enterprise Technology & Innovation! We are a team that prides ourselves on leveraging technology to create digital transformations. We look for ways to bring about innovative solutions while providing top-notch customer service.

Proud to Offer Work with a greater purpose

Work With Us | Maricopa County, AZ

• Tuition reimbursement
• Exceptional work-life balance, with hybrid and alternative work schedule options
• Opportunities for growth and development within Maricopa County
• Low-cost, high-value healthcare for you and your qualifying dependents
• Child care benefits, including access to our on-site center, Maricopa County Kids Club, dedicated to serving Maricopa County families
• Paid vacation, sick time, and parental leave
• Extensive wellness program, including an incentive
• Enrollment in the Arizona State Retirement System, a defined retirement benefit requiring a 11.98% monthly contribution rate that includes a 100% employer match on Day 1

• Five years of related information technology experience
• Three years of experience in a role as an Information Security professional
• One year of technical engineering experience in platforms covering the following Information Security domains:
  Identity and Access Management (IAM) Data Security and Data Loss Prevention (DLP) Application Security Testing and Validation, including SAST and/or DAST
• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Information Systems, or a closely related technical field
• A combination of post-secondary education and/or job-related experience may substitute for the education requirement on a year-for-year basis
• Successful candidates must currently possess, or have the ability to obtain, a valid Arizona Driver's license by the time of hire
• Currently hold and maintain at least one of the following certifications:
  Certified Information Systems Security Professional (CISSP) Certified Cloud Security Professional (CCSP) CompTIA CySA+ Certified Ethical Hacker (CEH) Offensive Security Certified Professional (OSCP) Or similar Information Security Certification
• Information Security platform administration experience
• Five years of hands-on systems, security engineering, or technical platform administration experience, which includes one of the following:
  • Senior-level systems or security platform administration
  • Linux server administration, preferably Red Hat Enterprise Linux (RHEL)
• Two years of experience in any one or more of the following Information Security areas:
  • Security compliance and frameworks
  • Security assessment Development and execution of gap analyses Development, implementation, or analysis of security controls.
• Experience in platform lifecycle management including selection, configuration, implementation, onboarding and offboarding
• Experience with Active Directory and/or Microsoft Entra
• Experience creating formal technical documentation
• Experience performing security tool integration and automation
• Experience performing vulnerability analysis
• Experience scripting or programming, preferably Power Shell and/or Python
• Proficiency with the following:
  • Security Control Testing and Technical Validation
  • AI Security Controls
• Microsoft Office Suite products, including Excel
• Demonstrated capability to do complex problem solving, advanced troubleshooting, and critical thinking

Administers, maintains, configures, integrates, troubleshoots, and optimizes Information Security platforms and technologies, including but not limited to privileged access management, identity and access management, data security and data loss prevention, cloud access security broker technologies, email security, endpoint detection and response, Security Information and Event Management (SIEM), application security testing, and security validation technologies. Develops and maintains standard operating procedures, technical documentation, system security plans, systems recovery plans, and other operational documentation for Information Security managed platforms and services.

Serves as a subject matter expert for…