Cybersecurity Administrator

tucsonaz; United States; On-site; USD 85,000 - 110,000; Full time

Job summary

The City of Tucson Information Technology Department is seeking a Cybersecurity Administrator to design, implement, and optimize security solutions across IT and OT environments, including SCADA and ICS. You will deploy SIEM/EDR, manage vulnerabilities, and automate security workflows for faster detection and response.

Responsibilities include collaborating on secure cloud migrations, developing threat detection capabilities, and maintaining CIS/NIST-aligned controls while ensuring compliance

Qualifications

• Education: Bachelor’s degree
• Experience: Three (3) years of relevant experience
• Equivalency: Any combination of relevant education and experience may be accepted.

Responsibilities

• Designs cybersecurity solutions for IT and OT environments including SCADA/ICS.
• Implements and maintains SIEM, EDR, vulnerability management platforms, email security, and cloud-native security.
• Collaborates with teams to embed security into projects and deployments.
• Reviews architectures for secure cloud migrations and provides configuration guidance.
• Develops threat detection with custom correlation rules, dashboards, and alerts.
• Responds to incidents in real time and coordinates remediation with IT/Operations.

Education

Bachelor's degree

Tools

SIEM

EDR

Vulnerability management

Cloud-native security

Job description

Position Specific Summary

The Cybers ecurity Administrator position at the City of Tucson's Information Technology Department is responsible for designing, implementing, and optimizing cybersecurity solutions to protect the City's infrastructure- including c yber-physical systems and operational environments . This role supports strategic initiatives by deploying and tuning tools and developing automation to enhance detection and response.

Duties and Responsibilities

• Designs cybersecurity solutions that protect enterprise Information Technology (IT) and Operational Technology (OT) environments, including Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems (ICS).
• Implements and maintains tools such as Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), vulnerability management platforms, email security, and cloud-native solutions.
• Collaborates with cross-functional teams to embed security into technology projects and deployments.
• Supports cloud migrations by reviewing architecture and offering secure configuration guidance.
• Develops threat detection capabilities by creating custom correlation rules, dashboards, and alerts.
• Optimizes incident response by identifying patterns and gaps.
• Automates security workflows to streamline operations and reduce response times.
• Conducts technical investigations using log correlation, forensic analysis, and root cause identification.
• Responds to cybersecurity incidents in real time.
• Coordinates remediation efforts with IT and operations teams to restore services and prevent recurrence.
• Monitors systems continuously using security tools and telemetry data.
• Identifies misconfigurations, vulnerabilities, and signs of malicious activity.
• Prioritizes risks based on severity and impact.
• Recommends remediation actions using current threat intelligence.
• Provides education and technical advice for securing systems and field devices, including servers, workstations, mobile devices, and OT assets.
• Aligns system settings with Center for Internet Security (CIS) Benchmarks, National Institute of Standards and Technology (NIST) guidelines, and City policy.
• Implements technical controls based on Zero Trust architecture and the NIST Cybersecurity Framework (CSF).
• Maintains secure access, data protection, segmentation, and endpoint visibility to enhance resilience and meet regulatory requirements.
• Develops security documentation such as configuration guides, standard procedures, and internal knowledge base articles.
• Maintains documentation to support consistent operations, training, and audit readiness.
• Performs all other duties and tasks as assigned.

Working Conditions

• Mostly office environment.
• All duties and responsibilities listed are subject to change.

Minimum Qualifications

• Education: Bachelor's degree
• Experience: Three (3) years of relevant experience
• Equivalency: Any combination of relevant education and experience ma

This position is based on-site at a City of Tucson facility. Remote or hybrid work arrangements are not available at this time.

The City of Tucson does not provide visa sponsorship.

Candidates must be legally authorized to work in the United States at the time of application and throughout the duration of employment.

Relocation expenses will not be be provided for this position. Candidates are responsible for all costs associated with relocating to the Tucson area, if applicable.

Candidates who are placed on the Civil Service Eligibility List and receive a contingent offer of employment must successfully complete the following: An extensive background investigation, including local, state, and national criminal history and fingerprint checks.

IMPORTANT INFORMATION Virtual interviews are tentatively scheduled for the week of August 31, 2026, and will be conducted via Microsoft Teams (available as a free download).

Hiring interviews, if applicable, may be conducted on-site at the City of Tucson Information Technology Department in Tucson, Arizona on the week of September 8, 2026.