Senior Cloud Security Engineer: Cloud Defense & IAM

Location: New York

The Office of Technology and Innovation (OTI) leverages technology to drive opportunity, improve public safety, and help government run better across New York City. From delivering affordable broadband to protecting against cybersecurity threats and building digital government services, OTI is at the forefront of how the city delivers for New Yorkers in the 21st century. Follow us on social media @NYCOfficeof

Tech, and visit (Use the "Apply for this Job" box below). to learn more.

At OTI, we offer great benefits, and the chance to work on projects that have a meaningful impact on millions of people. You'll have the opportunity to work with cutting-edge technology and collaborate with other passionate professionals who share your drive and commitment to making a difference through technology.

About Cyber Command
Cyber Command is charged with protecting all City systems against cyber threats, including systems that deliver vital services to New Yorkers. Headed by the Chief Information Security Officer of the City of New York, we provide in-depth support to over 100 agencies and offices to protect, detect, identify, respond to, and recover from cyber threats.

Job Description
The Senior Cloud Security Engineer will work with all NYC agencies to ensure compliance with NYC cybersecurity policies and standards, industry best-practices and data security practices; analyze the identity and access management posture to provide actionable results in collaboration with other members of the Cloud Security Team; follow-up with tasks executed by agencies and appropriate risk management strategies are undertaken; and assist the agency resources with security challenges and advise on remediation techniques.

Responsibilities will include:
- Ensure that cloud and on-prem technologies are integrated, tested, operated, and configured to meet the objectives of NYC Cyber Command’s defensive efforts.
- Responsible for the operation of key strategic defensive technologies including cloud-based security implementation controls and responder environments, network defenses, Citywide email filtering technology, and endpoint protection
- Provide guidance at various stages of planning and implementing security design, processes and solutions;
- Pivot between numerous technical projects and communicate status at different stakeholder levels;
- Document and report to management the execution phases and project-level solution deployment plans to leverage the NYC agencies' technology departments and executive leadership.
- Handle special projects and initiatives as assigned.

HOURS/SHIFT
Day - Due to the necessary technical duties of this position in a 24/7 operation, candidate may be required to work various shifts such as weekends and/or nights/evenings.

WORK LOCATION
Brooklyn, NY

TO APPLY

* Interested applicants with other civil service titles who meet the preferred requirements should also submit a resume for consideration

Please go to  and search for Job

SUBMISSION OF A RESUME IS NOT A GUARANTEE THAT YOU WILL RECEIVE AN INTERVIEW
APPOINTMENTS ARE SUBJECT TO OVERSIGHT APPROVAL

OTI participates in E-Verify

IT SECURITY SPECIALIST - 95622

Minimum Qualifications

A baccalaureate degree from an accredited college and four years of satisfactory full-time experience related to projects and policies required by the particular position; or,

Education and/or experience which is equivalent to "1" above.

Preferred Skills
The successful candidate should possess the following skills and experience:

Expert in knowledge of one of the following areas:

- Information Security concepts related to Governance, Risk & Compliance
- Proven track record of securing Data across multiple platforms
- Understanding of Zero Trust framework
- Office 365 and Microsoft Exchange Online Defender for Office 365,
- Defender for Cloud Apps, Microsoft Purview, Azure Entra Active Directory security services (PIM, CAA, CA, MFA), and Azure AD Application Proxy)
Knowledge of at least three of the following areas:

- Mapping policies into security controls across on-premise, hybrid and cloud environments- SMTP routing and email security concepts
- Common networking protocols and services including TCP, UDP, DNS, DHCP, HTTP, and LDAP
- Developing and supporting Intune Endpoint MDM, MAM, & BYOD policies
- Troubleshooting workstation (Windows, Mac) and server (Windows, Linux) issues
- Scripting skills (Python, Bash, Powershell)- Microsoft Windows Server stack (Active Directory, DNS, WMI, DHCP, etc)- Change Management platforms and…