Senior Information Technology Engineer, IT Security (IT​/OT Firewall Administration

Position: Senior Information Technology Engineer, IT Security (IT/OT Firewall Administration)
EBMUD

Job Title:

Senior Information Technology Engineer, IT Security (IT/OT Firewall Administration) Salary Info: $157,488 - $191,424 Annually, Plus Excellent Benefits + Retirement Opens online at  on Monday, July 27, 2026 Online applications must be received by 4:30 p.m., Friday, August 14, 2026 The East Bay Municipal Utility District’s (EBMUD) Information Systems Department is currently seeking a Senior Information Technology Engineer with deep experience administering firewalls in mission-critical, highly available enterprise environments.

The role focuses on securing both internal and perimeter networks, supporting business continuity and strengthening cyber resilience across business networks (IT) and operational technology networks (OT) and the implementation and oversight of cybersecurity policies, standards, and best practices. Applicants must reside within commuting distance of EBMUD’s Oakland, CA Administration building. This is a hybrid position which requires office presence in accordance with EBMUD’s telecommuting guidelines (minimum 2-day per week physical office presence currently required but is subject to change).

Telecommuting policies are subject to change. EBMUD will not provide relocation assistance. We are seeking candidates with advanced IT/OT security experience and skills. Experience is desired in three or more of the following disciplines:
· At least five years of hands-on experience administering firewalls in enterprise-scale, high-availability production environments, including policy management, troubleshooting, and rule lifecycle maintenance.
· Experience with enterprise-grade firewalls: e.g. Palo Alto Networks, Cisco, Forti Net, Checkpoint.
· Expertise in troubleshooting network issues. Solid understanding of TCP/IP protocols.
· Experience configuring, supporting and managing routing- BGP, OSPF, EIGRP, static.
· Experience with analyzing firewall logs and packet captures.
· Experience managing virtual firewalls in AWS, Azure and/or GCP.
· Understanding of IAAS concepts.
· Experience implementing and supporting ssl-inspection in a production environment.
· Experience managing VPN’s: IPSEC site to site and end user remote access.
· Experience working with firewall policies, implementing changes, testing changes, submitting changes through change control processes.
· Experience with automating firewall rule analysis or change workflows using scripts or APIs is a plus. And the ability to:
· Create and maintain network diagrams and documentation for new and existing firewall deployments- depicting logical and physical environments.
· Communicate complex topics to non-technical users. Ability and willingness to share knowledge and information with others.
· Create documentation detailing implementation steps, tracking changes.
· Work across teams to investigate and respond to incidents.
· Lead or participate in IT/OT security projects by creating project plans and technical requirements.
· Track and report on incident handling and response metrics.
· Participate in annual tabletop cyber incident response exercises.
· Establish and maintain positive working relationships; teamwork attitude.
· Balance project deliverables among day-to-day operational demands.
· Perform independent research and share knowledge effectively.
· Maintain calm and focus during emergency operations.
· Work in a hybrid work environment. The most competitive candidates for the Senior IT Security Engineer position will possess strong working knowledge of firewall administration in a highly available production environment; networking experience; threat intelligence; experience in critical infrastructure-including ICS/OT firewall management; and project management principles and practices and cybersecurity best practices. Your experience will include demonstrated success working in many of the following areas:
· Experience managing firewall changes including: NAT, routing, VPN, access policies, troubleshooting, deployment, upgrades.
· Experience reviewing, analyzing and responding to firewall alerts: security and operational.
· Ability to perform and analyze network captures utilizing wireshark.…