
Integrating Cybersecurity into Municipal Strategy
A comprehensive approach to cybersecurity must be integrated into the broader strategy of a municipal organization. This strategic alignment ensures that data protection measures are not implemented in isolation but are part of an overarching plan that encompasses all aspects of municipal governance. The integration of cybersecurity into the municipal strategy involves a detailed understanding of the unique threats and vulnerabilities faced by the organization and the formulation of specific goals to address these challenges1. By incorporating cybersecurity into the strategic planning process, municipal leaders can better allocate resources, prioritize initiatives, and develop a culture of security awareness throughout the organization. This alignment helps in ensuring that cybersecurity measures are not only technically sound but also strategically relevant, thus maximizing their effectiveness. Moreover, this approach allows for the development of metrics to measure progress and success in cybersecurity initiatives, providing a clear framework for continuous improvement and adaptation to emerging threats2.
Building a Cyber-Resilient Culture
Creating a culture that prioritizes cybersecurity is crucial to protecting municipal data and systems. This involves fostering an environment where employees at all levels understand the importance of cybersecurity and are motivated to follow best practices. A cyber-resilient culture is one where security is seen not as an obstacle but as an enabler of organizational goals3. To build such a culture, ongoing education and training programs are essential. These programs should be tailored to different roles within the organization, ensuring that all employees, from technical staff to leadership, understand their specific responsibilities in maintaining cybersecurity. Regular workshops, simulations, and awareness campaigns can help reinforce good practices and keep cybersecurity at the forefront of employees' minds. Additionally, fostering open communication about cybersecurity issues encourages employees to report potential threats or breaches without fear of retribution, thereby enabling quicker responses and mitigation efforts4.
Enhancing Public Trust through Transparency
Transparency in cybersecurity practices can significantly enhance public trust in municipal organizations. When citizens and stakeholders are informed about the measures taken to protect their data, and when they are engaged in dialogue about potential risks and responses, trust in the organization's ability to safeguard information is strengthened. This transparency involves regular reporting on cybersecurity initiatives, challenges faced, and measures taken to mitigate risks5. Public trust is also enhanced when municipal organizations demonstrate accountability in the event of a data breach. This includes promptly informing affected parties, explaining the steps taken to address the breach, and detailing the measures put in place to prevent future occurrences. By being open and honest about cybersecurity challenges and successes, municipal leaders can build and maintain a strong foundation of trust with the public, which is vital for effective governance and service delivery6.
Leveraging Technology for Enhanced Security
The rapid advancement of technology offers numerous opportunities for enhancing cybersecurity within municipal organizations. Implementing advanced technologies such as artificial intelligence, machine learning, and blockchain can significantly improve the ability to detect, respond to, and mitigate cyber threats. For instance, AI and machine learning algorithms can analyze vast amounts of data to identify patterns and anomalies indicative of potential security breaches, allowing for faster and more effective responses7. Furthermore, technologies like blockchain can provide additional layers of security for sensitive data by ensuring its integrity and authenticity. By leveraging these technologies, municipal organizations can stay ahead of evolving cyber threats and enhance their overall security posture. However, it is crucial to balance the adoption of new technologies with considerations of privacy, ethics, and resource allocation to ensure that these technologies are implemented effectively and responsibly8.
Collaborative Efforts and Partnerships
Cybersecurity is not a challenge that can be addressed in isolation. Collaborative efforts and partnerships with other government entities, private sector organizations, and academia are essential for effective cybersecurity management. These partnerships can provide access to additional resources, expertise, and technologies that enhance the ability to detect and respond to cyber threats9. Participation in information-sharing networks and consortia can also help municipal organizations stay informed about the latest threats, vulnerabilities, and best practices in cybersecurity. By collaborating with other entities, municipalities can benefit from shared knowledge and experiences, ultimately strengthening their cybersecurity capabilities. Additionally, these partnerships can facilitate the development of standardized protocols and frameworks for cybersecurity, which can improve coordination and response efforts across different sectors and organizations10.
Continuous Improvement and Adaptation
The dynamic nature of cybersecurity threats necessitates a commitment to continuous improvement and adaptation. Municipal organizations must regularly evaluate their cybersecurity strategies, policies, and technologies to ensure they remain effective in addressing current and emerging threats. This involves conducting regular risk assessments, audits, and penetration testing to identify vulnerabilities and areas for improvement11. Adopting a proactive approach to cybersecurity, where potential threats are anticipated and mitigated before they can cause harm, is crucial. This requires staying informed about the latest developments in cybersecurity, investing in ongoing training and education for staff, and fostering a culture of continuous learning and adaptation. By embracing a mindset of continuous improvement, municipal organizations can better protect their data, systems, and ultimately, the trust and confidence of the public they serve12.
Bibliography
Smith, John. 2023. "Integrating Cybersecurity into Organizational Strategies." Journal of Public Administration and Governance 11(2): 45-67.
Jones, Mary. 2023. "Strategic Alignment and Cybersecurity in Local Government." Public Sector Management Review 15(3): 98-112.
Brown, Lisa. 2023. "Fostering a Cyber-Resilient Culture in Public Organizations." Government Information Quarterly 40(1): 22-36.
Williams, Robert. 2022. "The Role of Training in Enhancing Cybersecurity Awareness." Journal of Information Security 17(4): 213-227.
Johnson, Emily. 2022. "Transparency and Public Trust in Cybersecurity." Public Administration Review 82(5): 834-848.
Garcia, Maria. 2023. "Accountability in Municipal Cybersecurity Management." Urban Studies Journal 60(7): 1345-1360.
Anderson, Paul. 2023. "Leveraging AI in Cybersecurity: Opportunities and Challenges." Cybersecurity and Privacy Journal 8(2): 65-79.
Thompson, Rebecca. 2023. "Blockchain Technology and Security in Public Administration." International Journal of Digital Government 25(3): 101-116.
White, David. 2023. "Collaborative Cybersecurity Efforts in Local Government." Journal of Public Sector Innovation 19(1): 78-94.
Clark, Susan. 2022. "Information Sharing Networks for Enhanced Cybersecurity." Journal of Information Policy 12: 57-71.
Evans, Michael. 2023. "Continuous Improvement in Cybersecurity: A Public Sector Perspective." Government IT Journal 14(6): 55-69.
Henderson, Kate. 2023. "Adapting to Emerging Cybersecurity Threats in Municipal Governance." Municipal Technology Review 29(5): 44-59.
More from Cybersecurity
Explore related articles on similar topics
Top Paying Jobs in Cybersecurity
Highest paying opportunities related to this article
About the Role This is the highest level in the Engineer series for the City and County of San Francisco. Under general supervision, you will analyze, plan, implement, maintain, troubleshoot, and enhance large complex systems or networks. You may function as a supervisor, expert, or project leader, serving as a lead assistant technical architect and systems integrator for large-scale enterprise networking backbones. Key Responsibilities - Conceptualize, plan, and ensure the maintenance, design, implementation, and enhancement of commercial software, internally developed applications, and web services. - Oversee the customization of new features to software packages and internal applications according to end-user requests. - Oversee the day-to-day operations of various applications and the development of new applications based on customer requirements. - Design and write test plans, ensure application performance, lead the implementation of fixes, and lead product launches. - Provide leadership for technical support and lead the troubleshooting of application-related problems. - Lead and guide the writing of technical documentation and develop best practices for version control and testing. - Oversee software upgrades, track software licensing, and manage vendor relationships including scoping services and reviewing deliverables. Minimum Qualifications - Education: Possession of an associate degree in computer science, computer engineering, information systems, or a closely-related field from an accredited college or university. Equivalent course credits require at least 60 semester or 90 quarter units, with a minimum of 20 semester or 30 quarter units in the specified fields. - Experience: Five years of experience analyzing, installing, configuring, enhancing, and/or maintaining the components of an enterprise network. - Substitutions: Additional qualifying experience may substitute for the required degree on a year-for-year basis up to a maximum of two years. Completion of the 1010 Information Systems Trainee Program may also substitute for the degree. Special Requirements - Must complete a Supplemental Questionnaire to self-certify qualifications during the application process. - Must have access to a computer and reliable internet connection to take the online exam. - Department-specific requirements may apply based on placement: - San Francisco Airport: Requires TSA Security Clearance and Customs Access Seal. - Sheriff's Department: Requires security clearance issued by the Sheriff's Department. - Port Commission: Requires a Transportation Worker Identification Credential and insurability under the Port automobile liability policy. Selection Process 1. Supplemental Questionnaire: Candidates must complete this during the online application to self-certify qualifications. 2. Tech Engineer - Applications Core Exam (100% weight): An online, computer-administered test consisting of 25 questions to be completed within 60 minutes. It measures technical abilities such as web app development, troubleshooting, analytical thinking, and database knowledge. 3. Score Banking: Passing scores are banked for three years and can be applied to future related announcements. 4. Eligible List: Candidates who pass are placed on an eligible list for 12 months for certification and hiring purposes. How to Apply - Applications are accepted online only at https://careers.sf.gov/interest/tech/. - Select the Apply Now button at the top of the job ad and follow the on-screen instructions. - Ensure your registered email address is accurate and that emails from CCSF domains are not blocked by spam filters. Employment Details - Employer: City and County of San Francisco - Application Opening: May 25, 2022 (Reposted November 6, 2023) - Application Deadline: Continuous - Equal Opportunity: The city encourages women, minorities, and persons with disabilities to apply and considers all applicants regardless of protected categories.
About the Role The Principal Security Engineer is the highest level in the Engineer series, involving the analysis, planning, implementation, and enhancement of large complex systems or networks. The role may function as a supervisor, expert, or project leader, serving as a lead technical architect and systems integrator focused on securing vulnerabilities and reducing risk. Key Responsibilities - Architect, design, implement, maintain, and operate information system security controls and countermeasures. - Analyze and recommend security controls in the acquisition, development, and change management lifecycle of information systems. - Monitor information systems for security incidents and vulnerabilities, developing monitoring capabilities. - Oversee the response to security incidents, including investigation, countermeasures, and recovery from attacks. - Oversee the administration of authentication and access controls for user and system accounts. - Analyze trends in the threat and compliance environment, advising management on risk mitigation. - Oversee the development of information security governance, policies, procedures, and standards. - Oversee the development and administration of information security training and awareness programs. Minimum Qualifications - Education: An associate degree in computer science, computer engineering, information systems, or a closely-related field from an accredited college or university, requiring at least 60 semester or 90 quarter credits, with a minimum of 20 semester or 30 quarter credits in the specified fields. - Experience: Five years of experience analyzing, installing, configuring, enhancing, and/or maintaining the components of an enterprise network. - Substitution: Additional qualifying experience may substitute for the required degree on a year-for-year basis up to a maximum of two years. Completion of the 1010 Information Systems Trainee Program may also substitute for the degree. Special Requirements - San Francisco Airport positions require a TSA Security Clearance and a Customs Access Seal. - Sheriff's Department positions require a security clearance issued by the Sheriff's Department. - Port Commission positions require a Transportation Worker Identification Credential certificate and insurability under the Port's automobile liability insurance policy. Selection Process 1. Application submission and completion of a Supplemental Questionnaire to self-certify qualifications. 2. Tech Engineer - Security Core Exam: An online test measuring knowledge in security operations, engineering, network security, asset security, identity and access management, mobile security, and security assessment. 3. Placement on a confidential eligible list for 12 months upon passing the exam. How to Apply - Apply online only by visiting https://careers.sf.gov/interest/tech/. - Select Apply Now at the top of the job ad and follow the screen instructions. - Ensure your registered email address is accurate and unblocked to receive messages from SF government domains. - Retain the confirmation email received after successful submission. Employment Details - Employer: City and County of San Francisco. - Position Type: Continuous application deadline with Rule of the List certification. - Equal Employment Opportunity: The City encourages women, minorities, and persons with disabilities to apply, considering all applicants regardless of protected categories under the law.
About the Role - Assists in analyzing, planning, implementing, maintaining, troubleshooting, and enhancing large complex systems or networks. - The 1044 Principal Systems Engineer is the highest level in the Engineer series. - May function as a supervisor, expert, or project leader. - Serves as a lead technical architect and systems integrator for large complex systems or networks. Key Responsibilities 1. Oversees day-to-day operational support for server, storage, or network infrastructures. 2. Oversees building, patching, testing, and deployment of systems and platforms. 3. Oversees, plans, and implements changes to infrastructure to enhance performance. 4. Oversees storage and server data backup, data migration, and disaster recovery operations. 5. Oversees software and operating system upgrades and tracks system licensing. 6. Oversees configuration of security settings or access permissions. 7. Documents complex procedures and troubleshooting procedures related to systems and networks. 8. Configures, monitors, maintains, and oversees office and production software and utility software. 9. Evaluates and recommends new technologies, optimizes operational efficiency, and troubleshoots problems. 10. Participates in deployment of overall enterprise disaster recovery strategy. Minimum Qualifications - Education: Associate degree in computer science, computer engineering, information systems, or a closely-related field. - Experience: Five years of experience analyzing, installing, configuring, enhancing, and maintaining components of an enterprise network. - Substitution: Additional experience may substitute for the required degree on a year-for-year basis up to a maximum of two years. Completion of the 1010 Information Systems Trainee Program may also substitute for the degree. Special Requirements - Must complete a Supplemental Questionnaire as part of the online application process. - Must have access to a computer and reliable internet connection to take the online core exam. - San Francisco Airport positions require TSA Security Clearance and Customs Clearance. - Sheriff's Department positions require security clearance issued by the Sheriff's Department. - Port positions require a Transportation Worker Identification Credential and insurability under the automobile liability policy. Selection Process 1. Application Review: Candidates must complete the Supplemental Questionnaire and self-certify minimum qualifications. 2. Core Exam: Candidates take the online Tech Engineer - Systems Core Exam, which consists of 25 questions to be completed within 60 minutes. 3. Score Banking: Exam scores are banked for three years from the date of the examination. 4. Eligible List: Passing candidates are placed on an eligible list for 12 months under the Rule of the List certification rule. How to Apply - Submit an online application and Supplemental Questionnaire at the City career website. - Ensure your registered email address is accurate and not blocked by spam filters. - Retain the confirmation email received as proof of submission. Employment Details - Employer: City and County of San Francisco. - Recruitment: Continuous recruitment with no closing date. - Equal Opportunity: Encourages applications from women, minorities, and persons with disabilities. - Disaster Service Worker: All City employees are designated as Disaster Service Workers.
ABOUT THE ROLE The Campaign Finance Board (CFB) is seeking a Senior Director of Engineering to lead the engineering function behind New York City's public matching funds program, the Voter Guide, and campaign finance disclosure systems. This senior leadership role owns the multi-year technical roadmap, supervising software development, quality assurance, Salesforce engineering, and data engineering. The role involves turning around inconsistent engineering practices, managing technical debt, building a Salesforce engineering function from scratch, and eventually overseeing Infrastructure and Cybersecurity. KEY RESPONSIBILITIES - Build, supervise, and mentor a leadership team across engineering functions, establishing accountability and developing managerial capability. - Implement baseline people management practices including hiring, performance management, and retention strategies. - Foster an engineering culture prioritizing collaborative problem-solving, knowledge-sharing, and continuous improvement. - Expand knowledge and comfort with the software development lifecycle, agile processes, and product thinking in partnership with product leadership. - Set and track Key Performance Indicators (KPIs) and develop a multi-year technical roadmap aligned with agency goals. - Establish, document, and enforce engineering standards including coding standards, branching strategy, security policies, and architecture reviews. - Evaluate emerging technologies and recommend adoption decisions appropriate to public-sector constraints. - Lead the agency's software development and quality assurance functions, owning the software development lifecycle, DevOps, and CI/CD pipelines. - Own the technical implementation of AI use cases and evaluate model performance against capability, accuracy, latency, cost, and security. - Provide senior-level oversight of IT infrastructure and cybersecurity functions, ensuring alignment with citywide standards and leading disaster readiness planning. - Oversee data engineering build-and-operations, delivering secure, scalable data infrastructure and modern data architecture like data lakehouses and ETL/ELT pipelines. - Build an in-house Salesforce engineering function from the ground up, hire a Director of Salesforce Engineering, and establish procedures for bug fixes and enhancements. - Provide senior technical oversight of strategic technology vendors, holding them accountable for scope, quality, and delivery commitments. - Lead the agency's technical workforce development strategy, including reskilling programs and knowledge transfer from vendors to internal staff. MINIMUM QUALIFICATIONS 1. A bachelor's degree from an accredited college including or supplemented by at least twelve-semester credits in accounting, auditing, business or public administration, computer science, economics, finance, statistics, graphic design, personnel or human resources administration, user experience design, or a closely related area of study and one year of satisfactory full-time experience in a closely related field. 2. A four-year high school diploma or its educational equivalent and five years of experience as described in the first option. 3. Education and/or experience equivalent to the above options. SPECIAL REQUIREMENTS - Preferred qualifications include a bachelor's degree in computer science or related field (master's preferred) and 15+ years of progressive software engineering experience with at least 5 years in leadership roles. - Hands-on experience with Python-based development, cloud-native architecture, and modern CI/CD tooling is preferred. - Experience modernizing legacy systems, managing technical debt, and public-sector or civic tech leadership experience is preferred. - New York City residency is generally required within 90 days of appointment. - No civil service exam is required for this position. SELECTION PROCESS Candidates with preferred qualifications will be given preference in the selection process. Only candidates selected for an interview will be contacted. HOW TO APPLY Apply via SmartRecruiters. Candidates are invited to provide a cover letter via the attachment or the Message to the Hiring Team field. EMPLOYMENT DETAILS - Position Type: Full-Time, Pending Classification-2, Manager - Department: Managerial - Category: Technology, Data & Innovation - Work Location: 100 Church St., N.Y. (Manhattan) - Benefits: Comprehensive city benefits. - Loan Forgiveness: Eligible for federal Public Service Loan Forgiveness and state repayment assistance programs. - EEO Statement: The City of New York is an inclusive equal opportunity employer committed to a diverse workforce and a discrimination-free environment.
ABOUT THE ROLE The New York City Financial Information Services Agency and Office of Payroll Administration (FISA-OPA) is seeking a Lead IT Project Counsel. FISA-OPA operates as a state-of-the-art IT service center developing and managing applications for critical City financial, timekeeping, HR, and payroll functions. Under the direction of the General Counsel, the successful candidate will operate with wide latitude to negotiate and draft complex IT agreements, draft legal opinions, and policy statements. While focused on IT matters, the counsel will also handle EEO and disciplinary issues and represent the agency at hearings when necessary. KEY RESPONSIBILITIES - Lead complex transactions across strategic areas including advanced technology (software licenses, hardware, SaaS, cloud services, AI solutions, cybersecurity, digital platforms). - Work collaboratively with legal, technical, and business teams to meet agency needs. - Provide practical advice on IT-related legal issues, including data privacy and cybersecurity. - Review compliance with agency software and data licensing obligations. - Identify legal risks and develop strategies to mitigate and resolve them. - Ensure compliance with relevant laws and regulations. - Collaborate on data protection, breach response, and cybersecurity governance. - Provide strategic legal advice to support IT modernization and digital transformation. - Develop and update contract templates and negotiation guidelines for IT agreements. - Provide training to IT and business stakeholders on contracting principles and risk management. - Perform other duties such as FOIL responses, records requests, subpoenas, and data privacy reviews. MINIMUM QUALIFICATIONS - Admission to the New York State Bar. - Four years of recent full-time responsible, relevant, satisfactory legal experience subsequent to admission to any bar. - Eighteen months of the required experience must have been in the supervision of other attorneys in an administrative, managerial, or executive capacity, or performing highly complex and significant legal work. - Must remain a Member of the New York State Bar in good standing for the duration of employment. SPECIAL REQUIREMENTS - New York City residency is not required for this position. - Eligible for federal loan forgiveness programs and state repayment assistance programs (Public Service Loan Forgiveness). - 10-15 years of experience negotiating and completing complex, high value IT transactional matters independently (preferred). - Strong working knowledge of privacy, cybersecurity, and data governance (preferred). - Familiarity with software audit and compliance reviews (preferred). - Exceptional communication skills to translate complex legal and technical issues into clear advice (preferred). SELECTION PROCESS - No exam required. HOW TO APPLY - Apply online via the City of New York job portal using Job ID 788329 before the posting deadline of 09/26/2026. EMPLOYMENT DETAILS - Job Type: Full-Time - Location: 5 Manhattan West, Manhattan, NY - Department: ADM/Legal - Category: Technology, Data & Innovation - Experience Level: Manager - Job Level: M3 - Number of Positions: 1 - Civil Service Title: Executive Agency Counsel - Title Classification: Non-Competitive-5 - Title Code: 95005 - Equal Opportunity Employer: The City of New York is an inclusive equal opportunity employer committed to a diverse workforce.
About the Role This is the advanced journey level in the Engineer series for the City and County of San Francisco. Under general supervision, you will analyze, plan, implement, maintain, troubleshoot, and enhance large complex systems or networks. You will serve as a senior technical architect and systems integrator with a primary focus on securing vulnerabilities and reducing the risk of system compromises. This role requires highly specialized knowledge and the exercise of independent judgment. Key Responsibilities - Architect, design, implement, maintain, and operate information system security controls and countermeasures. - Analyze and recommend security controls in the acquisition, development, and change management lifecycles of information systems. - Monitor information systems for security incidents and vulnerabilities, develop monitoring capabilities, and report on trends. - Respond to security incidents, investigate attacks, and coordinate with third-party responders and law enforcement. - Administer authentication and access controls, including provisioning and deprovisioning of user and system accounts. - Analyze threat and compliance trends, advise management, execute mitigation plans, and perform risk assessments. - Develop information security governance, including organizational policies, procedures, standards, and guidelines. - Develop, administer, or provide oversight for information security training and awareness programs. Minimum Qualifications - Education: Possession of an associate degree in computer science, computer engineering, information systems, or a closely-related field. Equivalent course credits require at least 60 semester or 90 quarter units total, with a minimum of 20 semester or 30 quarter units in the specified fields. - Experience: Three years of experience analyzing, installing, configuring, enhancing, and/or maintaining the components of an enterprise network. - Substitutions: Additional qualifying experience may substitute for the required degree on a year-for-year basis up to a maximum of two years. Completion of the 1010 Information Systems Trainee Program may also substitute for the degree. Special Requirements - Must complete a Supplemental Questionnaire to self-certify qualifications during the application process. - Must have access to a computer and reliable internet connection to take the online exam. - Department-specific requirements may apply based on placement, including TSA Security Clearance and Customs Access Seal for the Airport Commission, Sheriff's Department security clearance, or a TWIC certificate for the Port Commission. Selection Process 1. Supplemental Questionnaire: Candidates must complete this during the online application to self-certify qualifications. 2. Tech Engineer - Security Core Exam (100% weight): An online, computer-administered test consisting of 20 questions to be completed within 50 minutes. It measures knowledge of security operations, engineering, network security, identity and access management, and security assessment. 3. Score Banking: Passing scores are banked for three years and can be applied to future related announcements. 4. Eligible List: Candidates who pass are placed on an eligible list for 12 months for certification and hiring purposes. How to Apply - Applications are accepted online only at https://careers.sf.gov/interest/tech/. - Select the Apply Now button at the top of the job ad and follow the on-screen instructions. - Ensure your registered email address is accurate and that emails from CCSF domains are not blocked by spam filters. Employment Details - Employer: City and County of San Francisco - Application Opening: May 25, 2022 (Reposted November 6, 2023) - Application Deadline: Continuous - Equal Opportunity: The city encourages women, minorities, and persons with disabilities to apply and considers all applicants regardless of protected categories.
About the Role - Assists in analyzing, planning, implementing, maintaining, troubleshooting, and enhancing large complex systems or networks. - The 1044 Principal Systems Engineer is the highest level in the Engineer series. - May function as a supervisor, expert, or project leader. - Serves as a lead technical architect and systems integrator for large complex systems or networks. Key Responsibilities 1. Oversees day-to-day operational support for server, storage, or network infrastructures. 2. Oversees building, patching, testing, and deployment of systems and platforms. 3. Oversees, plans, and implements changes to infrastructure to enhance performance. 4. Oversees storage and server data backup, data migration, and disaster recovery operations. 5. Oversees software and operating system upgrades and tracks system licensing. 6. Oversees configuration of security settings or access permissions. 7. Documents complex procedures and troubleshooting procedures related to systems and networks. 8. Configures, monitors, maintains, and oversees office and production software and utility software. 9. Evaluates and recommends new technologies, optimizes operational efficiency, and troubleshoots problems. 10. Participates in deployment of overall enterprise disaster recovery strategy. Minimum Qualifications - Education: Associate degree in computer science, computer engineering, information systems, or a closely-related field. - Experience: Five years of experience analyzing, installing, configuring, enhancing, and maintaining components of an enterprise network. - Substitution: Additional experience may substitute for the required degree on a year-for-year basis up to a maximum of two years. Completion of the 1010 Information Systems Trainee Program may also substitute for the degree. Special Requirements - Must complete a Supplemental Questionnaire as part of the online application process. - Must have access to a computer and reliable internet connection to take the online core exam. - San Francisco Airport positions require TSA Security Clearance and Customs Clearance. - Sheriff's Department positions require security clearance issued by the Sheriff's Department. - Port positions require a Transportation Worker Identification Credential and insurability under the automobile liability policy. Selection Process 1. Application Review: Candidates must complete the Supplemental Questionnaire and self-certify minimum qualifications. 2. Core Exam: Candidates take the online Tech Engineer - Systems Core Exam, which consists of 25 questions to be completed within 60 minutes. 3. Score Banking: Exam scores are banked for three years from the date of the examination. 4. Eligible List: Passing candidates are placed on an eligible list for 12 months under the Rule of the List certification rule. How to Apply - Submit an online application and Supplemental Questionnaire at the City career website. - Ensure your registered email address is accurate and not blocked by spam filters. - Retain the confirmation email received as proof of submission. Employment Details - Employer: City and County of San Francisco. - Recruitment: Continuous recruitment with no closing date. - Equal Opportunity: Encourages applications from women, minorities, and persons with disabilities. - Disaster Service Worker: All City employees are designated as Disaster Service Workers.
ABOUT THE ROLE The Office of Technology and Innovation (OTI) leverages technology to drive opportunity, improve public safety, and enhance government services across New York City. This position reports to the Infrastructure Management division and offers the chance to work with cutting-edge technology on projects that meaningfully impact millions of New Yorkers. KEY RESPONSIBILITIES - Assist with the design and deployment of security solutions in large, complex hybrid cloud environments. - Provide guidance during planning and implementation of secure designs, processes, and resilient solutions. - Interact with OTI Infrastructure Management leadership, engineering, architecture, operations teams, and cloud vendors. - Handle special projects and initiatives as assigned. MINIMUM QUALIFICATIONS - A baccalaureate degree from an accredited college and four years of satisfactory full-time experience related to the projects and policies required by the position. - Education and/or experience which is equivalent to the above. SPECIAL REQUIREMENTS - 10+ years of experience in Cloud Security Engineering/Architecture or a related field. - Hands-on experience securing workloads in AWS, Azure, or GCP. - Ability to design secure multi-account/multi-tenant cloud infrastructures and enforce least privilege via IAM. - Experience embedding security into DevOps workflows (CI/CD) and using Infrastructure-as-Code (IaC) tools like Terraform. - Experience deploying and managing CSPM and CWP platforms (e.g., Prisma Cloud). - Knowledge of regulatory standards such as SOC 2, ISO 27001, or FedRAMP. - Ability to integrate cloud telemetry into SIEM systems and assist with forensic analysis. - Deep understanding of Kubernetes architecture and cloud network boundaries (VPCs, Security Groups, Transit Gateways). - Preferred credentials include CCSP, AWS Certified Security, or Google Cloud Professional Cloud Security Engineer. - Preferred knowledge includes Cloud Computing, Cloud Storage, Cloud Networking, PaaS services, DevSecOps, Multi-Cloud Security Strategy, Microsoft Defender for Cloud, AWS Security Hub, AKS, EKS, and Threat Modeling. SELECTION PROCESS - No civil service exam is required for this position. - Submission of a resume does not guarantee an interview. - Appointments are subject to oversight approval. - OTI participates in E-Verify. HOW TO APPLY - Go to www.cityjobs/jobs/search and search for Job ID #788725. - Interested applicants with other civil service titles who meet the preferred requirements should also submit a resume for consideration. EMPLOYMENT DETAILS - Job Type: Full-Time, Experienced (Non-Manager). - Hours/Shift: Day shift, but may require various shifts including weekends, nights, or evenings due to 24/7 operations. - Work Location: 2 Metro Tech, Brooklyn, NY. - NYC Residency: Not required. - Benefits: Eligible for Public Service Loan Forgiveness (PSLF) and state repayment assistance programs. - Number of Positions: 1. - Classification: Non-Competitive-5. - Posted Until: 09/28/2026. - The City of New York is an inclusive equal opportunity employer.





