Information Security Engineer

Position Summary

Designs, implements, integrates, and maintains the County's cybersecurity technologies and technical controls. The position is the senior hands-on engineer for endpoint, identity, vulnerability, logging, cloud, network, privileged-access, and security-automation capabilities and works closely with infrastructure, applications, GIS, client services, and managed security providers.

Essential Functions

· Implements and administers EDR/XDR, vulnerability-management, SIEM/logging, PAM/password-vault, identity-security, email-security, cloud-security, and network-security technologies.

· Develops secure configurations, policies, integrations, alerting, dashboards, and automated workflows across Microsoft, Fortinet, SentinelOne or successor platforms, Tenable or successor platforms, and other approved technologies.

· Validates endpoint/server coverage, sensor health, policy consistency, exclusions, log ingestion, retention, and control effectiveness.

· Performs vulnerability scanning, configuration assessment, risk prioritization, remediation validation, and technical reporting.

· Partners with infrastructure and application staff to harden servers, endpoints, network devices, cloud services, and critical applications.

· Supports incident investigation, containment, forensic collection, recovery, root-cause analysis, and remediation.

· Develops technical standards, diagrams, build guides, runbooks, recovery procedures, and knowledge articles.

· Reviews firewall rules, remote access, segmentation, privileged access, service accounts, certificates, and administrative pathways.

· Evaluates proposed technologies and vendor solutions for security, supportability, integration, and lifecycle risk.

· Conducts control testing, tabletop support, recovery exercises, and security-tool tuning.

· Provides technical mentoring and cross-training to IT staff and supports security awareness content.

The duties listed are representative and not exhaustive. The employee may be required to perform other job-related duties consistent with the position's purpose and classification.

Minimum Qualifications

· Bachelor's degree in cybersecurity, computer science, information systems, engineering, or a related field.

· Five years of progressively responsible experience in cybersecurity engineering, systems/network security, cloud security, infrastructure engineering with significant security duties, or a comparable field.

· Equivalent combinations of education, certifications, and directly relevant experience may be considered.

Preferred Qualifications

· Security+, CySA+, SSCP, GSEC, CISSP, Microsoft security, Fortinet NSE/FCP, Tenable, SentinelOne, GIAC, or comparable certifications.

· Hands-on experience with Microsoft 365/Entra/Intune, FortiGate/Fortinet, EDR/XDR, SIEM, vulnerability management, scripting/automation, PAM, and backup/DR.

· Experience in a multi-site public-sector or regulated environment.

Knowledge, Skills, and Abilities

· Security engineering, network and systems administration, cloud identity, endpoint security, vulnerability management, logging, incident response, automation, and technical documentation.

· Ability to troubleshoot complex systems, prioritize risk, explain technical findings, and implement controls without unnecessarily disrupting operations.

Working Relationships and Service Expectations

· Works collaboratively with County Administration, department heads, elected officials, IT staff, vendors, and external partners.

· Communicates professionally, respectfully, and clearly with technical and nontechnical stakeholders.

· Protects confidential, security-sensitive, personnel, legal, and operational information.

· Supports a customer-service culture focused on partnership, accountability, timely communication, documentation, and continuous improvement.

Working Conditions / Physical Requirements

Primarily office and computer-based work with periodic travel to County facilities. May require work outside normal business hours for projects, maintenance, exercises, or incidents. Must be able to use standard office and computing equipment and communicate effectively in person, by telephone, and through electronic collaboration tools. HR should finalize physical requirements and any on-call language using the County's standard job-description format.

Pay: $80,249.00 - $102,317.00 per year

Benefits:

• 401(k)
• Dental insurance
• Employee assistance program
• Employee discount
• Flexible spending account
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Retirement plan
• Vision insurance

Work Location: In person