Information Technology Security Administrator

POSITION OVERVIEW

The United States District Court is seeking an Information Technology Security Administrator in Phoenix, Arizona. This position is part of a consolidated Systems Technology Division and reports to a Systems Technology Division Manager. The IT security administrator evaluates, designs, implements and maintains the court’s cybersecurity posture across network infrastructure, cloud and hybrid environments, applications, endpoints and telecommunications. This role serves as a technical specialist and advisor on information security, risk mitigation, incident response and compliance for judges, court executives, probation officers and staff for the District of Arizona, encompassing seven offices and approximately 600 end users.

• Security strategy and program oversight: Review, evaluate and make recommendations regarding the court’s IT security program, covering network infrastructure, cloud resources (Microsoft 365, Azure and AWS), custom applications, commercial off-the-shelf software, VoIP, and mobile and remote access solutions.
• Threat and vulnerability management: Conduct continuous security assessments, risk analyses and vulnerability scans across planned and installed systems. Identify weaknesses, coordinate patch management and deploy endpoint detection and response (EDR and XDR) tools to mitigate threats. Notify management promptly of critical vulnerabilities.
• Policy and framework administration: Develop, implement and maintain local court security policies, guidance and operational procedures aligned with national judiciary frameworks. Create templates, guidelines, checklists and documentation to support compliance and Zero Trust security principles.
• Advisory and training services: Provide technical advice on IT security architecture, data protection and risk management to judges, court unit executives and IT management. Develop and deliver cybersecurity awareness training and documentation for court personnel.
• Security operations and tool management: Act as team lead in configuring, administering and monitoring automated security tools, including next-generation firewalls, intrusion detection and prevention systems, web security gateways, SIEM and SOAR platforms (such as Splunk and Microsoft Sentinel), and identity management systems. Monitor SPAM mailbox for Phishing attempts and scan suspicious attachments as needed.
• Automation and scripting: Write and maintain scripts using Power Shell, Python and Bash to automate security checks, streamline administrative workflows, enforce system configurations and parse security logs.
• Infrastructure and identity management: Perform advanced Active Directory and Microsoft Entra  architecture design, Group Policy Object management and access control enforcement. Support secure end-user workstation settings, virtual server infrastructure, multi-factor authentication, and Zero Trust network access solutions.
• Incident response and collaboration: Coordinate and execute incident response procedures. Collaborate with key judiciary stakeholders, including the Administrative Office, the 9th Circuit IT security officer, federal court IT peers and commercial service providers.
• Network and systems engineering support: Provide specialized technical support for local and wide area network infrastructure, virtualized server environments (VMware vSphere), storage area networks, IP routing and switching, enterprise wireless (802.11xx), and converged courtroom audio-video and VoIP technologies.
• Special projects: Assist with technical architecture for new or renovated court spaces, participate in special IT projects and perform other technical support duties as assigned.

Minimum of three years of…