Cyberattacks Are the New Snow Days: Can Your School or City Stay Open?
Imagine logging into Canvas the week of finals and finding a message stating the platform is temporarily down. No exams, no grades, just an error message and headlines about a massive leak and cyberattack. For millions of students, this was not just a tech glitch; it caused panic about their final exams, their financial aid, and their graduation plans.
That kind of shock is about much more than one platform. It exposes how tightly our lives are tied to digital systems. Whether you run a city department, manage a university office, lead a team, or are just starting your career, cybersecurity is now part of your day job- even if your title says nothing about “security.”
Common Cyber Threats: The Usual Suspects, Upgraded
Cyberattacks rarely begin with a Hollywood-style hacker scene. They usually start with ordinary tools and human habits. A realistic email, a familiar logo, a reused password, a software update that gets postponed again and again.
Phishing and social engineering prey on trust and urgency. A message that looks like it is from IT, Canvas support, or a city payment portal pushes you to “verify” your account or “avoid suspension” by clicking quickly. The goal is to make you react before you think.
Ransomware attacks lock up files and systems. Suddenly the services people rely on—classes, billing, utilities, payroll—are frozen unless a ransom is paid. Even if you never touch the payment negotiations, you feel the impact when systems go dark.
Credential attacks turn one mistake into many. When passwords stolen from one site are tried on others, reused passwords become a shortcut for attackers. If your personal, school, and work accounts share the same or similar passwords, one leak becomes a skeleton key.
Unpatched systems create invisible cracks. Old software, missing security updates, and unsupported tools are like unlocked windows in a building. No one notices until someone climbs through.
Sometimes the threat is accidental. A misdirected email, a misconfigured database, or an account for a former employee that never got shut off can all open doors. Not every breach is driven by malice—but attackers are quick to exploit the weaknesses those accidents create.
Building a Culture of Cybersecurity Awareness
Fire safety works because everyone understands the basics and responds together, not because everyone is a firefighter. Cybersecurity needs the same shared mindset.
For institutions and municipalities, this starts with how leaders talk. When executives, deans, and department heads frame cybersecurity as part of safety and continuity—not an obscure technical chore—it becomes easier for everyone to care. When they use plain language and model good habits, like using multifactor authentication, they signal that security is a shared responsibility.
Training needs to feel real and manageable. Long, dull yearly courses invite people to click through without learning. Short, frequent, scenario-based sessions work better. For example, walking through, “You get this email about finals or about an urgent payment—what do you do?” makes the risk concrete.
The culture improves when people feel safe reporting problems. If someone clicks a suspicious link but speaks up right away, that can be the difference between a small scare and a big disaster. When the response is “Thank you for telling us” instead of “How could you do that?”, you encourage early warnings instead of silence.
At the individual level, awareness is about permission to pause. When something feels off, it is okay to slow down, verify through a second channel, or ask for help. Each person who chooses caution over speed becomes a quiet layer of defense.
Developing Resilient Cyber Defenses
No single product or tool can “solve” cybersecurity. Resilience comes from layers. If one layer fails, others are there to blunt the impact.
For institutions and municipalities, one key layer is identity and access. Multifactor authentication makes it harder for someone with stolen credentials to log in. Restricting access to sensitive systems based on role means not everyone needs a master key. Regularly reviewing and removing accounts for people who leave or change roles closes quiet loopholes.
Separating systems is another layer. When grading, finance, HR, public safety, and public websites are segmented, a breach in one place does not automatically cascade to all the others. It is the difference between a small controlled fire and a building-wide blaze.
Keeping software and systems updated is basic but vital. Updates and patches often fix specific security weaknesses. When those updates are delayed, the organization is effectively leaving doors open after the manufacturer has already told the world the locks were broken.
Backups are the safety net. Regular backups of key systems and data make it possible to recover from ransomware or major failures without starting from scratch. Those backups only matter, though, if they are tested. Practicing a restore shows how long recovery actually takes and what breaks along the way.
Individuals also build resilience in their own lives. Using a password manager to create unique passwords, turning on multifactor authentication, keeping devices up to date, and avoiding mixing work accounts with personal accounts all reduce the chances that one incident can upend everything at once.
Resilience does not promise that nothing bad will happen. It ensures that when something does, you wobble instead of collapse.
Prioritizing Incident Response Planning
The worst moment to figure out who does what in a cyber crisis is in the middle of it. Planning ahead turns chaos into a sequence of steps.
For institutions and municipalities, a good incident response plan clearly defines roles. Someone is responsible for technical containment and recovery. Someone else manages communications to staff, students, or residents. Others coordinate with legal, HR, finance, and external partners. When these roles are known in advance, people can act quickly instead of hesitating.
The plan should be practiced, not just documented. Simple tabletop exercises are enough to start. Gather a small group and walk through scenarios: “Our main learning system is offline for five days. What happens next?” or “Our payment portal has been hijacked—who do we call, and what do we shut down?” These rehearsals expose gaps while the stakes are low.
Communication is critical. Drafting message templates and guidelines before a crisis reduces panic and confusion later. The goal is to be accurate, timely, and honest without causing unnecessary alarm. Clear updates about what is known, what is being done, and what people should do next build trust.
Incident response also has a human side. Plans should consider how to support people when services they rely on go offline. That might mean alternate digital channels, temporary websites, phone hotlines, or even analog workarounds like in-person assistance. The appearance of control often matters as much as control itself.
Individuals can think in small-scale response terms too. Knowing how to reset passwords quickly, how to log out of active sessions on lost devices, and where to report suspicious activity can turn a scary moment into a manageable one.
Embracing Innovation Without Ignoring Risk
New tools and platforms arrive constantly. Universities deploy learning systems and AI tools. Cities roll out smart sensors and digital services. Organizations shift to cloud-based platforms. It is neither possible nor desirable to stop this wave. The challenge is to ride it safely.
Security should be part of every new project from the beginning. When a team proposes a new portal, app, or platform, questions about misuse and abuse should sit alongside questions about convenience and features. Thinking early about who has access, how data is stored, and how people will log in helps avoid brittle systems later.
Vendors need to be evaluated on security, not just price and functionality. Asking about their update practices, incident history, transparency, and support during a crisis helps you see whether they will be a partner in resilience or a weak link. Security commitments should be as real as feature lists.
Starting small can make innovation safer. Piloting new tools with a limited group allows organizations to spot usability issues, security gaps, and unintended behaviors before rolling out to everyone. Feedback from students, staff, or residents often surfaces risks that never showed up in sales demos.
For individuals and especially early-career professionals, this environment is a chance to be valuable in new ways. Learning basic security concepts, asking careful questions when new tools are introduced, and gently pushing for safer defaults—like enabling multifactor authentication—can position you as someone who protects both innovation and stability.
Innovation without security is speed without brakes. Innovation with security is speed with steering and seatbelts.
From Canvas Chaos to Everyday Readiness
The Canvas leak and outage made the cost of weak digital resilience painfully clear. It showed how one platform failure can ripple through classrooms, families, and institutions in a matter of hours. But the larger lesson is broader than Canvas itself. It is about how prepared we are for the next disruption, whatever form it takes.
If you lead or manage, you have leverage. You can make multifactor authentication mandatory on one more system. You can schedule that one-hour tabletop exercise on “What if our core platform went down?” You can ask hard questions about security the next time a vendor pitches a beautiful new tool.
If you are early in your career or somewhere in the middle, you still have power. You can stop reusing passwords. You can turn on multifactor authentication. You can be the person who reports the suspicious message instead of quietly deleting it. You can nudge colleagues to slow down when something looks off.
The next time a key system blinks out—whether it is a learning platform during finals, a payroll portal on payday, or a city service during a storm—someone will say, “We never saw this coming.” Someone else will say, “We planned for this, and we know what to do.” Which person do you want to be?
What is one specific action- however small- that you are willing to take this week to make your school, your workplace, or your city a little harder to break?
References
Associated Press. “Canvas Outage Wreaks Havoc for Students during College Finals.” AP News, May 8, 2026.
CNN. “What We Know about the Canvas Hack That Has Impacted Thousands of Schools.” CNN, May 7, 2026.
Inside Higher Ed. “‘Pay or Leak’: Hackers Target Big Higher Ed Vendor.” Inside Higher Ed, May 5, 2026.
NBC News. “Cyberattack Hits Canvas Learning Management System.” NBC News, May 7, 2026.
NPR. “Canvas Data Breach Rattles Colleges during Finals Period.” NPR, May 8, 2026.
Politico. “Cyberattack Hits Canvas System Used by Thousands of Schools as Finals Loom.” Politico, May 8, 2026.
USA Today. “Security Incident Hits Canvas as Finals Loom for Students.” USA Today, May 8, 2026.
Yahoo News. “Canvas Hack Strands University Students during Finals Week.” Yahoo News, May 7, 2026.
East Idaho News. “Canvas Hack Strands University Students during Finals Week.” East Idaho News, May 7, 2026.
IPM Newsroom. “Learning Platform Canvas Subject to Ransomware Attack Ahead of U of I Final Exams.” Illinois Public Media Newsroom, May 6, 2026.
Before we fine‑tune this further, how formal does your final document need to be (e.g., internal city memo vs. journal-style publication), so the reference list can match that tone?
More from Cybersecurity
Explore related articles on similar topics
Top Paying Jobs in Cybersecurity
Highest paying opportunities related to this article
About the Role This is the highest level in the Engineer series for the City and County of San Francisco. Under general supervision, you will analyze, plan, implement, maintain, troubleshoot, and enhance large complex systems or networks. You may function as a supervisor, expert, or project leader, serving as a lead assistant technical architect and systems integrator for large-scale enterprise networking backbones. Key Responsibilities - Conceptualize, plan, and ensure the maintenance, design, implementation, and enhancement of commercial software, internally developed applications, and web services. - Oversee the customization of new features to software packages and internal applications according to end-user requests. - Oversee the day-to-day operations of various applications and the development of new applications based on customer requirements. - Design and write test plans, ensure application performance, lead the implementation of fixes, and lead product launches. - Provide leadership for technical support and lead the troubleshooting of application-related problems. - Lead and guide the writing of technical documentation and develop best practices for version control and testing. - Oversee software upgrades, track software licensing, and manage vendor relationships including scoping services and reviewing deliverables. Minimum Qualifications - Education: Possession of an associate degree in computer science, computer engineering, information systems, or a closely-related field from an accredited college or university. Equivalent course credits require at least 60 semester or 90 quarter units, with a minimum of 20 semester or 30 quarter units in the specified fields. - Experience: Five years of experience analyzing, installing, configuring, enhancing, and/or maintaining the components of an enterprise network. - Substitutions: Additional qualifying experience may substitute for the required degree on a year-for-year basis up to a maximum of two years. Completion of the 1010 Information Systems Trainee Program may also substitute for the degree. Special Requirements - Must complete a Supplemental Questionnaire to self-certify qualifications during the application process. - Must have access to a computer and reliable internet connection to take the online exam. - Department-specific requirements may apply based on placement: - San Francisco Airport: Requires TSA Security Clearance and Customs Access Seal. - Sheriff's Department: Requires security clearance issued by the Sheriff's Department. - Port Commission: Requires a Transportation Worker Identification Credential and insurability under the Port automobile liability policy. Selection Process 1. Supplemental Questionnaire: Candidates must complete this during the online application to self-certify qualifications. 2. Tech Engineer - Applications Core Exam (100% weight): An online, computer-administered test consisting of 25 questions to be completed within 60 minutes. It measures technical abilities such as web app development, troubleshooting, analytical thinking, and database knowledge. 3. Score Banking: Passing scores are banked for three years and can be applied to future related announcements. 4. Eligible List: Candidates who pass are placed on an eligible list for 12 months for certification and hiring purposes. How to Apply - Applications are accepted online only at https://careers.sf.gov/interest/tech/. - Select the Apply Now button at the top of the job ad and follow the on-screen instructions. - Ensure your registered email address is accurate and that emails from CCSF domains are not blocked by spam filters. Employment Details - Employer: City and County of San Francisco - Application Opening: May 25, 2022 (Reposted November 6, 2023) - Application Deadline: Continuous - Equal Opportunity: The city encourages women, minorities, and persons with disabilities to apply and considers all applicants regardless of protected categories.
About the Role The Principal Security Engineer is the highest level in the Engineer series, involving the analysis, planning, implementation, and enhancement of large complex systems or networks. The role may function as a supervisor, expert, or project leader, serving as a lead technical architect and systems integrator focused on securing vulnerabilities and reducing risk. Key Responsibilities - Architect, design, implement, maintain, and operate information system security controls and countermeasures. - Analyze and recommend security controls in the acquisition, development, and change management lifecycle of information systems. - Monitor information systems for security incidents and vulnerabilities, developing monitoring capabilities. - Oversee the response to security incidents, including investigation, countermeasures, and recovery from attacks. - Oversee the administration of authentication and access controls for user and system accounts. - Analyze trends in the threat and compliance environment, advising management on risk mitigation. - Oversee the development of information security governance, policies, procedures, and standards. - Oversee the development and administration of information security training and awareness programs. Minimum Qualifications - Education: An associate degree in computer science, computer engineering, information systems, or a closely-related field from an accredited college or university, requiring at least 60 semester or 90 quarter credits, with a minimum of 20 semester or 30 quarter credits in the specified fields. - Experience: Five years of experience analyzing, installing, configuring, enhancing, and/or maintaining the components of an enterprise network. - Substitution: Additional qualifying experience may substitute for the required degree on a year-for-year basis up to a maximum of two years. Completion of the 1010 Information Systems Trainee Program may also substitute for the degree. Special Requirements - San Francisco Airport positions require a TSA Security Clearance and a Customs Access Seal. - Sheriff's Department positions require a security clearance issued by the Sheriff's Department. - Port Commission positions require a Transportation Worker Identification Credential certificate and insurability under the Port's automobile liability insurance policy. Selection Process 1. Application submission and completion of a Supplemental Questionnaire to self-certify qualifications. 2. Tech Engineer - Security Core Exam: An online test measuring knowledge in security operations, engineering, network security, asset security, identity and access management, mobile security, and security assessment. 3. Placement on a confidential eligible list for 12 months upon passing the exam. How to Apply - Apply online only by visiting https://careers.sf.gov/interest/tech/. - Select Apply Now at the top of the job ad and follow the screen instructions. - Ensure your registered email address is accurate and unblocked to receive messages from SF government domains. - Retain the confirmation email received after successful submission. Employment Details - Employer: City and County of San Francisco. - Position Type: Continuous application deadline with Rule of the List certification. - Equal Employment Opportunity: The City encourages women, minorities, and persons with disabilities to apply, considering all applicants regardless of protected categories under the law.
About the Role - Assists in analyzing, planning, implementing, maintaining, troubleshooting, and enhancing large complex systems or networks. - The 1044 Principal Systems Engineer is the highest level in the Engineer series. - May function as a supervisor, expert, or project leader. - Serves as a lead technical architect and systems integrator for large complex systems or networks. Key Responsibilities 1. Oversees day-to-day operational support for server, storage, or network infrastructures. 2. Oversees building, patching, testing, and deployment of systems and platforms. 3. Oversees, plans, and implements changes to infrastructure to enhance performance. 4. Oversees storage and server data backup, data migration, and disaster recovery operations. 5. Oversees software and operating system upgrades and tracks system licensing. 6. Oversees configuration of security settings or access permissions. 7. Documents complex procedures and troubleshooting procedures related to systems and networks. 8. Configures, monitors, maintains, and oversees office and production software and utility software. 9. Evaluates and recommends new technologies, optimizes operational efficiency, and troubleshoots problems. 10. Participates in deployment of overall enterprise disaster recovery strategy. Minimum Qualifications - Education: Associate degree in computer science, computer engineering, information systems, or a closely-related field. - Experience: Five years of experience analyzing, installing, configuring, enhancing, and maintaining components of an enterprise network. - Substitution: Additional experience may substitute for the required degree on a year-for-year basis up to a maximum of two years. Completion of the 1010 Information Systems Trainee Program may also substitute for the degree. Special Requirements - Must complete a Supplemental Questionnaire as part of the online application process. - Must have access to a computer and reliable internet connection to take the online core exam. - San Francisco Airport positions require TSA Security Clearance and Customs Clearance. - Sheriff's Department positions require security clearance issued by the Sheriff's Department. - Port positions require a Transportation Worker Identification Credential and insurability under the automobile liability policy. Selection Process 1. Application Review: Candidates must complete the Supplemental Questionnaire and self-certify minimum qualifications. 2. Core Exam: Candidates take the online Tech Engineer - Systems Core Exam, which consists of 25 questions to be completed within 60 minutes. 3. Score Banking: Exam scores are banked for three years from the date of the examination. 4. Eligible List: Passing candidates are placed on an eligible list for 12 months under the Rule of the List certification rule. How to Apply - Submit an online application and Supplemental Questionnaire at the City career website. - Ensure your registered email address is accurate and not blocked by spam filters. - Retain the confirmation email received as proof of submission. Employment Details - Employer: City and County of San Francisco. - Recruitment: Continuous recruitment with no closing date. - Equal Opportunity: Encourages applications from women, minorities, and persons with disabilities. - Disaster Service Worker: All City employees are designated as Disaster Service Workers.
ABOUT THE ROLE The Campaign Finance Board (CFB) is seeking a Senior Director of Engineering to lead the engineering function behind New York City's public matching funds program, the Voter Guide, and campaign finance disclosure systems. This senior leadership role owns the multi-year technical roadmap, supervising software development, quality assurance, Salesforce engineering, and data engineering. The role involves turning around inconsistent engineering practices, managing technical debt, building a Salesforce engineering function from scratch, and eventually overseeing Infrastructure and Cybersecurity. KEY RESPONSIBILITIES - Build, supervise, and mentor a leadership team across engineering functions, establishing accountability and developing managerial capability. - Implement baseline people management practices including hiring, performance management, and retention strategies. - Foster an engineering culture prioritizing collaborative problem-solving, knowledge-sharing, and continuous improvement. - Expand knowledge and comfort with the software development lifecycle, agile processes, and product thinking in partnership with product leadership. - Set and track Key Performance Indicators (KPIs) and develop a multi-year technical roadmap aligned with agency goals. - Establish, document, and enforce engineering standards including coding standards, branching strategy, security policies, and architecture reviews. - Evaluate emerging technologies and recommend adoption decisions appropriate to public-sector constraints. - Lead the agency's software development and quality assurance functions, owning the software development lifecycle, DevOps, and CI/CD pipelines. - Own the technical implementation of AI use cases and evaluate model performance against capability, accuracy, latency, cost, and security. - Provide senior-level oversight of IT infrastructure and cybersecurity functions, ensuring alignment with citywide standards and leading disaster readiness planning. - Oversee data engineering build-and-operations, delivering secure, scalable data infrastructure and modern data architecture like data lakehouses and ETL/ELT pipelines. - Build an in-house Salesforce engineering function from the ground up, hire a Director of Salesforce Engineering, and establish procedures for bug fixes and enhancements. - Provide senior technical oversight of strategic technology vendors, holding them accountable for scope, quality, and delivery commitments. - Lead the agency's technical workforce development strategy, including reskilling programs and knowledge transfer from vendors to internal staff. MINIMUM QUALIFICATIONS 1. A bachelor's degree from an accredited college including or supplemented by at least twelve-semester credits in accounting, auditing, business or public administration, computer science, economics, finance, statistics, graphic design, personnel or human resources administration, user experience design, or a closely related area of study and one year of satisfactory full-time experience in a closely related field. 2. A four-year high school diploma or its educational equivalent and five years of experience as described in the first option. 3. Education and/or experience equivalent to the above options. SPECIAL REQUIREMENTS - Preferred qualifications include a bachelor's degree in computer science or related field (master's preferred) and 15+ years of progressive software engineering experience with at least 5 years in leadership roles. - Hands-on experience with Python-based development, cloud-native architecture, and modern CI/CD tooling is preferred. - Experience modernizing legacy systems, managing technical debt, and public-sector or civic tech leadership experience is preferred. - New York City residency is generally required within 90 days of appointment. - No civil service exam is required for this position. SELECTION PROCESS Candidates with preferred qualifications will be given preference in the selection process. Only candidates selected for an interview will be contacted. HOW TO APPLY Apply via SmartRecruiters. Candidates are invited to provide a cover letter via the attachment or the Message to the Hiring Team field. EMPLOYMENT DETAILS - Position Type: Full-Time, Pending Classification-2, Manager - Department: Managerial - Category: Technology, Data & Innovation - Work Location: 100 Church St., N.Y. (Manhattan) - Benefits: Comprehensive city benefits. - Loan Forgiveness: Eligible for federal Public Service Loan Forgiveness and state repayment assistance programs. - EEO Statement: The City of New York is an inclusive equal opportunity employer committed to a diverse workforce and a discrimination-free environment.
ABOUT THE ROLE The New York City Financial Information Services Agency and Office of Payroll Administration (FISA-OPA) is seeking a Lead IT Project Counsel. FISA-OPA operates as a state-of-the-art IT service center developing and managing applications for critical City financial, timekeeping, HR, and payroll functions. Under the direction of the General Counsel, the successful candidate will operate with wide latitude to negotiate and draft complex IT agreements, draft legal opinions, and policy statements. While focused on IT matters, the counsel will also handle EEO and disciplinary issues and represent the agency at hearings when necessary. KEY RESPONSIBILITIES - Lead complex transactions across strategic areas including advanced technology (software licenses, hardware, SaaS, cloud services, AI solutions, cybersecurity, digital platforms). - Work collaboratively with legal, technical, and business teams to meet agency needs. - Provide practical advice on IT-related legal issues, including data privacy and cybersecurity. - Review compliance with agency software and data licensing obligations. - Identify legal risks and develop strategies to mitigate and resolve them. - Ensure compliance with relevant laws and regulations. - Collaborate on data protection, breach response, and cybersecurity governance. - Provide strategic legal advice to support IT modernization and digital transformation. - Develop and update contract templates and negotiation guidelines for IT agreements. - Provide training to IT and business stakeholders on contracting principles and risk management. - Perform other duties such as FOIL responses, records requests, subpoenas, and data privacy reviews. MINIMUM QUALIFICATIONS - Admission to the New York State Bar. - Four years of recent full-time responsible, relevant, satisfactory legal experience subsequent to admission to any bar. - Eighteen months of the required experience must have been in the supervision of other attorneys in an administrative, managerial, or executive capacity, or performing highly complex and significant legal work. - Must remain a Member of the New York State Bar in good standing for the duration of employment. SPECIAL REQUIREMENTS - New York City residency is not required for this position. - Eligible for federal loan forgiveness programs and state repayment assistance programs (Public Service Loan Forgiveness). - 10-15 years of experience negotiating and completing complex, high value IT transactional matters independently (preferred). - Strong working knowledge of privacy, cybersecurity, and data governance (preferred). - Familiarity with software audit and compliance reviews (preferred). - Exceptional communication skills to translate complex legal and technical issues into clear advice (preferred). SELECTION PROCESS - No exam required. HOW TO APPLY - Apply online via the City of New York job portal using Job ID 788329 before the posting deadline of 09/26/2026. EMPLOYMENT DETAILS - Job Type: Full-Time - Location: 5 Manhattan West, Manhattan, NY - Department: ADM/Legal - Category: Technology, Data & Innovation - Experience Level: Manager - Job Level: M3 - Number of Positions: 1 - Civil Service Title: Executive Agency Counsel - Title Classification: Non-Competitive-5 - Title Code: 95005 - Equal Opportunity Employer: The City of New York is an inclusive equal opportunity employer committed to a diverse workforce.
About the Role This is the advanced journey level in the Engineer series for the City and County of San Francisco. Under general supervision, you will analyze, plan, implement, maintain, troubleshoot, and enhance large complex systems or networks. You will serve as a senior technical architect and systems integrator with a primary focus on securing vulnerabilities and reducing the risk of system compromises. This role requires highly specialized knowledge and the exercise of independent judgment. Key Responsibilities - Architect, design, implement, maintain, and operate information system security controls and countermeasures. - Analyze and recommend security controls in the acquisition, development, and change management lifecycles of information systems. - Monitor information systems for security incidents and vulnerabilities, develop monitoring capabilities, and report on trends. - Respond to security incidents, investigate attacks, and coordinate with third-party responders and law enforcement. - Administer authentication and access controls, including provisioning and deprovisioning of user and system accounts. - Analyze threat and compliance trends, advise management, execute mitigation plans, and perform risk assessments. - Develop information security governance, including organizational policies, procedures, standards, and guidelines. - Develop, administer, or provide oversight for information security training and awareness programs. Minimum Qualifications - Education: Possession of an associate degree in computer science, computer engineering, information systems, or a closely-related field. Equivalent course credits require at least 60 semester or 90 quarter units total, with a minimum of 20 semester or 30 quarter units in the specified fields. - Experience: Three years of experience analyzing, installing, configuring, enhancing, and/or maintaining the components of an enterprise network. - Substitutions: Additional qualifying experience may substitute for the required degree on a year-for-year basis up to a maximum of two years. Completion of the 1010 Information Systems Trainee Program may also substitute for the degree. Special Requirements - Must complete a Supplemental Questionnaire to self-certify qualifications during the application process. - Must have access to a computer and reliable internet connection to take the online exam. - Department-specific requirements may apply based on placement, including TSA Security Clearance and Customs Access Seal for the Airport Commission, Sheriff's Department security clearance, or a TWIC certificate for the Port Commission. Selection Process 1. Supplemental Questionnaire: Candidates must complete this during the online application to self-certify qualifications. 2. Tech Engineer - Security Core Exam (100% weight): An online, computer-administered test consisting of 20 questions to be completed within 50 minutes. It measures knowledge of security operations, engineering, network security, identity and access management, and security assessment. 3. Score Banking: Passing scores are banked for three years and can be applied to future related announcements. 4. Eligible List: Candidates who pass are placed on an eligible list for 12 months for certification and hiring purposes. How to Apply - Applications are accepted online only at https://careers.sf.gov/interest/tech/. - Select the Apply Now button at the top of the job ad and follow the on-screen instructions. - Ensure your registered email address is accurate and that emails from CCSF domains are not blocked by spam filters. Employment Details - Employer: City and County of San Francisco - Application Opening: May 25, 2022 (Reposted November 6, 2023) - Application Deadline: Continuous - Equal Opportunity: The city encourages women, minorities, and persons with disabilities to apply and considers all applicants regardless of protected categories.
About the Role - Assists in analyzing, planning, implementing, maintaining, troubleshooting, and enhancing large complex systems or networks. - The 1044 Principal Systems Engineer is the highest level in the Engineer series. - May function as a supervisor, expert, or project leader. - Serves as a lead technical architect and systems integrator for large complex systems or networks. Key Responsibilities 1. Oversees day-to-day operational support for server, storage, or network infrastructures. 2. Oversees building, patching, testing, and deployment of systems and platforms. 3. Oversees, plans, and implements changes to infrastructure to enhance performance. 4. Oversees storage and server data backup, data migration, and disaster recovery operations. 5. Oversees software and operating system upgrades and tracks system licensing. 6. Oversees configuration of security settings or access permissions. 7. Documents complex procedures and troubleshooting procedures related to systems and networks. 8. Configures, monitors, maintains, and oversees office and production software and utility software. 9. Evaluates and recommends new technologies, optimizes operational efficiency, and troubleshoots problems. 10. Participates in deployment of overall enterprise disaster recovery strategy. Minimum Qualifications - Education: Associate degree in computer science, computer engineering, information systems, or a closely-related field. - Experience: Five years of experience analyzing, installing, configuring, enhancing, and maintaining components of an enterprise network. - Substitution: Additional experience may substitute for the required degree on a year-for-year basis up to a maximum of two years. Completion of the 1010 Information Systems Trainee Program may also substitute for the degree. Special Requirements - Must complete a Supplemental Questionnaire as part of the online application process. - Must have access to a computer and reliable internet connection to take the online core exam. - San Francisco Airport positions require TSA Security Clearance and Customs Clearance. - Sheriff's Department positions require security clearance issued by the Sheriff's Department. - Port positions require a Transportation Worker Identification Credential and insurability under the automobile liability policy. Selection Process 1. Application Review: Candidates must complete the Supplemental Questionnaire and self-certify minimum qualifications. 2. Core Exam: Candidates take the online Tech Engineer - Systems Core Exam, which consists of 25 questions to be completed within 60 minutes. 3. Score Banking: Exam scores are banked for three years from the date of the examination. 4. Eligible List: Passing candidates are placed on an eligible list for 12 months under the Rule of the List certification rule. How to Apply - Submit an online application and Supplemental Questionnaire at the City career website. - Ensure your registered email address is accurate and not blocked by spam filters. - Retain the confirmation email received as proof of submission. Employment Details - Employer: City and County of San Francisco. - Recruitment: Continuous recruitment with no closing date. - Equal Opportunity: Encourages applications from women, minorities, and persons with disabilities. - Disaster Service Worker: All City employees are designated as Disaster Service Workers.
ABOUT THE ROLE The Office of Technology and Innovation (OTI) leverages technology to drive opportunity, improve public safety, and enhance government services across New York City. This position reports to the Infrastructure Management division and offers the chance to work with cutting-edge technology on projects that meaningfully impact millions of New Yorkers. KEY RESPONSIBILITIES - Assist with the design and deployment of security solutions in large, complex hybrid cloud environments. - Provide guidance during planning and implementation of secure designs, processes, and resilient solutions. - Interact with OTI Infrastructure Management leadership, engineering, architecture, operations teams, and cloud vendors. - Handle special projects and initiatives as assigned. MINIMUM QUALIFICATIONS - A baccalaureate degree from an accredited college and four years of satisfactory full-time experience related to the projects and policies required by the position. - Education and/or experience which is equivalent to the above. SPECIAL REQUIREMENTS - 10+ years of experience in Cloud Security Engineering/Architecture or a related field. - Hands-on experience securing workloads in AWS, Azure, or GCP. - Ability to design secure multi-account/multi-tenant cloud infrastructures and enforce least privilege via IAM. - Experience embedding security into DevOps workflows (CI/CD) and using Infrastructure-as-Code (IaC) tools like Terraform. - Experience deploying and managing CSPM and CWP platforms (e.g., Prisma Cloud). - Knowledge of regulatory standards such as SOC 2, ISO 27001, or FedRAMP. - Ability to integrate cloud telemetry into SIEM systems and assist with forensic analysis. - Deep understanding of Kubernetes architecture and cloud network boundaries (VPCs, Security Groups, Transit Gateways). - Preferred credentials include CCSP, AWS Certified Security, or Google Cloud Professional Cloud Security Engineer. - Preferred knowledge includes Cloud Computing, Cloud Storage, Cloud Networking, PaaS services, DevSecOps, Multi-Cloud Security Strategy, Microsoft Defender for Cloud, AWS Security Hub, AKS, EKS, and Threat Modeling. SELECTION PROCESS - No civil service exam is required for this position. - Submission of a resume does not guarantee an interview. - Appointments are subject to oversight approval. - OTI participates in E-Verify. HOW TO APPLY - Go to www.cityjobs/jobs/search and search for Job ID #788725. - Interested applicants with other civil service titles who meet the preferred requirements should also submit a resume for consideration. EMPLOYMENT DETAILS - Job Type: Full-Time, Experienced (Non-Manager). - Hours/Shift: Day shift, but may require various shifts including weekends, nights, or evenings due to 24/7 operations. - Work Location: 2 Metro Tech, Brooklyn, NY. - NYC Residency: Not required. - Benefits: Eligible for Public Service Loan Forgiveness (PSLF) and state repayment assistance programs. - Number of Positions: 1. - Classification: Non-Competitive-5. - Posted Until: 09/28/2026. - The City of New York is an inclusive equal opportunity employer.