Senior Cyber Cloud Security Engineer

City of New York; New York (NY); On-site; USD 140,000 - 190,000; Full time

Job summary

City of New York’s Office of Technology and Innovation (OTI) seeks a Senior Cloud Security Engineer to partner with NYC agencies, ensuring compliance with NYC cybersecurity policies and data security practices across cloud and on-prem environments.

You will analyze identity and access management posture, guide secure design, and work on remediation with agency teams, while contributing to risk management and defensive operations in a 24/7 setting from Brooklyn.

Qualifications

• Bachelor's degree and 4+ years of relevant experience related to projects and policies.
• Strong knowledge of cloud security concepts and NYC cybersecurity standards.
• Ability to design, implement, and communicate security controls and incident response processes.

Responsibilities

• Ensure cloud and on-prem technologies are integrated, tested, operated, and configured to meet NYC Cyber Command objectives.
• Operate key defensive technologies including cloud-based controls, responder environments, network defenses, email filtering, and endpoint protection.
• Provide guidance at planning and implementing security design, processes and solutions.
• Pivot between multiple projects and communicate status to stakeholders.
• Document and report execution phases and deployment plans to leverage agency technology departments and leadership.
• Handle special projects and initiatives as assigned.

Skills

Zero Trust

Office 365 Defender

Azure AD

PowerShell

Python

Bash

Jira

ServiceNow

Security policies

Incident response

Education

Bachelor's degree

Tools

Microsoft Defender for Cloud Apps

Microsoft Purview

Azure Entra

Job description

The Office of Technology and Innovation (OTI) leverages technology to drive opportunity, improve public safety, and help government run better across New York City. From delivering affordable broadband to protecting against cybersecurity threats and building digital government services, OTI is at the forefront of how the city delivers for New Yorkers in the 21st century. Follow us on social media @NYCOfficeofTech, and visit www.nyc.gov/oti to learn more.

At OTI, we offer great benefits, and the chance to work on projects that have a meaningful impact on millions of people. You'll have the opportunity to work with cutting-edge technology and collaborate with other passionate professionals who share your drive and commitment to making a difference through technology.

About Cyber Command

Cyber Command is charged with protecting all City systems against cyber threats, including systems that deliver vital services to New Yorkers. Headed by the Chief Information Security Officer of the City of New York, we provide in-depth support to over 100 agencies and offices to protect, detect, identify, respond to, and recover from cyber threats.

Job Description

The Senior Cloud Security Engineer will work with all NYC agencies to ensure compliance with NYC cybersecurity policies and standards, industry best-practices and data security practices; analyze the identity and access management posture to provide actionable results in collaboration with other members of the Cloud Security Team; follow‑up with tasks executed by agencies and appropriate risk management strategies are undertaken; and assist the agency resources with security challenges and advise on remediation techniques.

Responsibilities

• Ensure that cloud and on‑prem technologies are integrated, tested, operated, and configured to meet the objectives of NYC Cyber Command’s defensive efforts.
• Responsible for the operation of key strategic defensive technologies including cloud‑based security implementation controls and responder environments, network defenses, Citywide email filtering technology, and endpoint protection
• Provide guidance at various stages of planning and implementing security design, processes and solutions;
• Pivot between numerous technical projects and communicate status at different stakeholder levels;
• Document and report to management the execution phases and project‑level solution deployment plans to leverage the NYC agencies' technology departments and executive leadership.
• Handle special projects and initiatives as assigned.

IT SECURITY SPECIALIST - 95622

HOURS/SHIFT

Day - Due to the necessary technical duties of this position in a 24/7 operation, candidate may be required to work various shifts such as weekends and/or nights/evenings.

WORK LOCATION

Brooklyn, NY

Minimum Qualifications

A baccalaureate degree from an accredited college and four years of satisfactory full‑time experience related to projects and policies required by the particular position; or,
Education and/or experience which is equivalent to '1' above.

Preferred Skills

The successful candidate should possess the following skills and experience: Expert in knowledge of one of the following areas:

• Information Security concepts related to Governance, Risk & Compliance
• Proven track record of securing Data across multiple platforms
• Understanding of Zero Trust framework
• Office 365 and Microsoft Exchange Online Defender for Office 365
• Defender for Cloud Apps, Microsoft Purview, Azure Entra Active Directory security services (PIM, CAA, CA, MFA), and Azure AD Application Proxy)
• Knowledge of at least three of the following areas:
• Mapping policies into security controls across on‑premise, hybrid and cloud environments
• SMTP routing and email security concepts
• Common networking protocols and services including TCP, UDP, DNS, DHCP, HTTP, and LDAP
• Developing and supporting Intune Endpoint MDM, MAM, & BYOD policies
• Troubleshooting workstation (Windows, Mac) and server (Windows, Linux) issues
• Scripting skills (Python, Bash, Powershell)
• Microsoft Windows Server stack (Active Directory, DNS, WMI, DHCP, etc)
• Change Management platforms and Scrum processes (ServiceNow, Jira, etc)
• Ability to problem solve in situations of ambiguity and to work effectively and efficiently in a high pressure environment
• Ability to pivot to work on emergent issues, events, or requests while keeping completing existing deliverables on time.
• Experience in documenting systems designs and configurations of architected solutions this may include conceptual, logical, and physical diagrams new environment design documents write‑ups on technical capabilities and solution configurations or runbooks for agency adoption.
• Understanding of security and compliance policies and incident response processes ability to work with different agencies to determine sensitive data that needs to be protected with DLP and information protection technology based on the citywide standards and policies.
• Ability to achieve goals with minimal supervision self‑starter self‑motivated and a capacity to get things done.

Public Service Loan Forgiveness

As a prospective employee of the City of New York, you may be eligible for federal loan forgiveness programs and state repayment assistance programs. For more information, please visit the U.S. Department of Education’s website at https://studentaid.gov/pslf/.

Residency Requirement

New York City Residency is not required for this position

Additional Information

The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.