Enterprise Security Engineer

Role Overview

The Enterprise Security Engineer installs, configures, maintains and provides ongoing support and administration for all information security systems, including firewalls, web and email filtering, VPNs, IDS/IPS, WAF, secure file transfer, and other security solutions for all city departments. The role monitors and assesses security risks and violations, enforces security standards, assists with architecting secure computing environments, and is responsible for the design, engineering and continuous optimization of the city’s enterprise security architecture, with a primary focus on Palo Alto Networks next‑generation firewall platforms.

• Serve as the enterprise owner and subject‑matter expert for Palo Alto Networks platforms, including next‑generation firewalls, Panorama, Global Protect, and advanced threat prevention services.
• Lead firewall architecture design, segmentation strategy, and policy lifecycle management, ensuring alignment to Zero Trust principles.
• Drive continuous optimization of firewall rule sets, eliminating redundancy, reducing attack surface, and improving performance and manageability.
• Ensure high availability and resiliency of network security infrastructure, including failover design, upgrades, and lifecycle management.
• Integrate Palo Alto capabilities with SIEM, endpoint, and threat intelligence platforms to enhance detection and response.

Anticipated starting salary up to mid‑point depending on experience; the full salary range is listed above, with a mid‑point of $ annually.

• Bachelor’s Degree from an accredited educational institution in Computer Science or a related field.
• A minimum of five years’ experience in systems analysis or design, testing and implementation of computer‑based information systems, and project management experience working on multiple projects and assignments simultaneously.
• An equivalent combination of education and certifications may substitute for the job‑related experience.
• Preferred:
  One or more recognized information security certifications such as CISSP, GIAC, CISM, Security+, etc.
• ACJIS TOC‑D certification within one month of hire.

• Every person employed by the City of Scottsdale must reside in the State of Arizona during active employment, regardless of whether the employee is approved for remote work.

• 2 Paid Holidays, including 1 Floating Holiday
• Vacation Accrual; starts at 10.3 hours/month
• Sick Leave Accrual; 8 hours/month
• Medical (including behavioral health coverage), Dental and Vision Benefits
• City Paid Basic Life Insurance equal to one times employee annual salary; option for Supplemental Life Insurance
• Tuition Reimbursement; $2,500/year
• Participation in the Arizona State Retirement System (ASRS) Defined benefit plan with mandatory employer and employee contributions currently at 12%, which includes a Long‑Term Disability benefit
• Supplemental Retirement Plans through Nationwide; 457
• Pet Insurance
• Bilingual pay compensation
• Employer contribution of $10 per pay period to employee’s PEHP (Post‑Employment Health Plan) account

It is the policy of the City of Scottsdale to provide employment opportunities to all persons based solely on ability, regardless of race, color, religion, sex, national origin, age, sexual orientation, gender identity or disability. When advised, reasonable accommodations will be made to enable an otherwise qualified applicant with a disability to participate in any phase of the recruitment process. Persons with a disability may request a reasonable accommodation by contacting Human Resources;

requests should be made 24 hours in advance or as early as possible. For TTY users, the Arizona Relay Service may contact HR Receptionist at (480) 312‑2491.