Cybersecurity Architect

Cybersecurity Jobs; Eugene (OR); Hybrid; USD 125,000 - 169,000; Full time

Benefits offered by this job

Bilingual pay up to 5% of base salary

Public-sector retirement (PERS)

Deferred compensation contributions

Robust benefits package

Job summary

The City of Eugene is seeking a Cybersecurity Architect to strengthen secure systems across municipal services. This hybrid role supports a modern cybersecurity program with clear accountability and ongoing opportunities to improve strategy, architecture, and operational controls.

Design, implement, and maintain the City’s cybersecurity architecture aligned to standards such as the NIST Cybersecurity Framework.

Qualifications

• Bachelor’s degree in information security, CS, IT, or closely related field.
• Six years of professional cybersecurity experience in government or public-sector environments.
• Two years in a supervisory or leadership role.
• Master’s degree is preferred.
• Professional certifications such as CISSP, CISM, CEH, Security+ preferred.
• Ability to acquire CJIS certification within 90 days of hire.
• Must pass CJIS background check prior to start date.

Responsibilities

• Design, implement, and maintain the City’s cybersecurity architecture and program.
• Lead security operations, including real-time monitoring, SIEM, and incident response.
• Develop and enforce cybersecurity policies and standards, including remote access and password policy.
• Conduct risk assessments and prioritize remediation across IT environments.
• Coordinate cross-department incident response and improve controls.
• Oversee budgeting and staffing for the security program.
• Collaborate with IT, public safety, and external agencies to ensure secure operations.

Skills

Leadership

Security architecture

Policy development

NIST familiarity

Communication

Education

Bachelor’s degree in information security / CS / IT or related field

Master’s degree in cybersecurity / IT management or related field (preferred)

Tools

CISSP

CISM

CEH

Security+

Job description

Join the City of Eugene’s Information Services Division as a Cybersecurity Architect and help strengthen secure systems across municipal services. This hybrid role supports a modern cybersecurity program with clear accountability, collaborative cross-department incident readiness, and ongoing opportunities to improve strategy, architecture, and operational controls.

Salary: USD 125,174 to 169,000 annually (range reflects $125,174.40 - $169,000.00). Hybrid work is supported, with a team schedule of Monday through Friday, 8:00 AM to 5:00 PM and flexibility based on business needs.

What you’ll do

Design, implement, and maintain the City’s cybersecurity architecture and program, aligned to recognized standards and built for government environments.

• Create and manage the City’s cybersecurity architecture in line with the NIST Cybersecurity Framework.
• Develop and/or advise on cybersecurity policies and standards, including items such as remote access and password policy.
• Maintain the City’s cybersecurity strategy, policies, standards, and operational procedures, and ensure they remain current.
• Track emerging threats, vulnerabilities, and technology trends relevant to municipal IT environments.
• Scope, evaluate, implement, configure, and manage security tools that support the defensive posture of the City.
• Research and evaluate emerging risks and future technologies, including Frontier AI, using a cybersecurity lens and recommending proactive actions.
• Ensure regulatory compliance including CJIS, HIPAA, PCI, and applicable state cybersecurity mandates.
• Conduct recurring security audits and risk assessments, producing prioritized recommendations to mitigate identified risks.
• Support business continuity and disaster recovery by integrating cybersecurity requirements into plans.
• Lead daily security operations, including real-time monitoring, intrusion detection, SIEM operations, security log analysis, and detection of anomalous activity.
• Manage vulnerability scanning, configuration assessments, and coordinate remediation with infrastructure and application teams.
• Oversee security platform deployment, tuning, and lifecycle management, including firewalls, IDS, IPS, SIEM, and endpoint protection solutions.
• Lead end-to-end incident response: triage, containment, eradication, forensic investigation, evidence collection, remediation guidance, and post-incident analysis.
• Coordinate cross-department incident response and incorporate lessons learned into improved controls and policy updates.
• Maintain and update incident response plans, and test plans using tabletop exercises and/or coordinated penetration testing.
• Manage the security program budget and prioritize tools and staff resources to align with budget.
• Lead and develop the security team, including personnel management, skills development, and resource allocations.
• Work closely with IT teams, public safety partners, and external agencies to maintain secure operations and interagency interoperability.
• Lead cybersecurity awareness initiatives and training programs for City employees.
• Prepare briefings, technical reports, audit responses, budgetary requests, and updates for executive leadership and City Council.
• Complete designated job tasks, special projects, and other duties as assigned, working cooperatively within team and department goals.

What you bring

• Bachelor’s degree in information security, computer science, information technology, or closely related field.
• Six (6) years of professional cybersecurity or information security experience, including experience with security standards and frameworks applicable to government systems.
• Two (2) years in a supervisory or leadership role.
• Experience in public-sector or municipal IT environments is preferred.
• Master’s degree in cybersecurity, IT management, or related field is preferred.
• Professional certifications such as CISSP, CISM, CEH, Security+, or equivalent are preferred.
• Ability to acquire and maintain CJIS certification within 90 days of hire.
• Must pass a CJIS background check prior to start date, including providing fingerprints, personal information, and a signed authorization form.

Tools and standards you’ll use

• NIST Cybersecurity Framework
• SIEM, security log analysis
• IDS, IPS
• Firewalls, endpoint protection solutions
• CJIS, HIPAA, PCI
• Frontier AI (risk evaluation)

Benefits and pay support

• Bilingual pay benefit: up to an additional 5% of base salary for bilingual pay (fluency required and proficiency test administered by the City’s Employee Resource Center division).
• Non-Represented Retirement Program: City contribution of 6% of an employee contribution, plus employer contribution, to a retirement program administered by Oregon Public Employees’ Retirement System (PERS).
• Non-Represented Retirement Program (deferred compensation): City will pay a 3% contribution to a deferred compensation program if the employee contributes at least 1%.
• Robust and competitive benefits (details referenced via the Benefits Tab/benefits summaries).

Work location: 500 E 4th Ave, Eugene, OR 97401. Must live within 45 minutes of City of Eugene City Hall. Hybrid schedule requires a minimum of two in-office days per week.

Schedule and coverage: Monday through Friday, 8:00 AM to 5:00 PM with flexibility per business need. Potential on-call responsibilities and emergency response duties, with occasional evening or weekend work during major incidents or system upgrades.

Selection process and compliance

• Applicants are screened based on relevant knowledge, abilities, skills, experience, and training.
• The process may include screening supplemental questionnaires, written or skill tests, ability or fitness tests, interviews, and assessment processes.
• Background investigations and records checks may be required.
• Some roles may require psychological evaluation and/or physical examination and a drug test prior to employment; marijuana use is evaluated consistent with current state law.
• Once the posting closes, the process can take 4-6 weeks.
• As required by the Immigration Reform and Control Act of 1986, the City requests documentation from eligible candidates. The City of Eugene does not participate in E-Verify, so candidates requiring E-Verify for employment authorization will not be eligible.

Equity and inclusion: Women, people with disabilities, and persons of color are strongly encouraged to apply.