Senior Cyber Cloud Security Engineer

New York City Office of Technology & Innovation; New York (NY); On-site; USD 120,000 - 170,000; Full time

Job summary

The New York City Office of Technology & Innovation is seeking a Senior Cloud Security Engineer to work with NYC agencies to ensure compliance with cybersecurity policies and standards. The role includes analyzing IAM posture, guiding remediation strategies, and supporting risk management across cloud and on-prem environments.

The ideal candidate will have a baccalaureate degree plus four years of relevant full-time experience, with strong knowledge of governance, risk, and compliance frameworks

Qualifications

• Bachelor's degree in a related field and four years of full-time experience or equivalent, in projects/policies.
• Experience aligning with NYC cybersecurity policies and standards is preferred.
• Strong knowledge of identity and access management and risk-based remediation strategies.

Responsibilities

• Ensure cloud and on-prem technologies are integrated and configured to meet NYC Cyber Command objectives.
• Operate key defensive technologies including cloud security controls, responder environments, email filtering, and endpoint protection.
• Provide guidance during planning and implementation of security designs and processes.
• Pivot between multiple projects and communicate status to stakeholders.
• Document and report execution phases and deployment plans to agency IT departments and leadership.
• Handle special projects as needed.

Skills

Governance

Data security

Zero Trust

Microsoft Defender

Azure AD

Education

Bachelor's degree in a related field

Tools

Office 365 Defender

Azure

Job description

The Office of Technology and Innovation (OTI) leverages technology to drive opportunity, improve public safety, and help government run better across New York City. From delivering affordable broadband to protecting against cybersecurity threats and building digital government services, OTI is at the forefront of how the city delivers for New Yorkers in the 21st century. Follow us on social media @NYCOfficeofTech, and visit www.nyc.gov/oti to learn more.

About Cyber Command

Cyber Command is charged with protecting all City systems against cyber threats, including systems that deliver vital services to New Yorkers. Headed by the Chief Information Security Officer of the City of New York, we provide in-depth support to over 100 agencies and offices to protect, detect, identify, respond to, and recover from cyber threats.

Job Description

The Senior Cloud Security Engineer will work with all NYC agencies to ensure compliance with NYC cybersecurity policies and standards, industry best-practices and data security practices; analyze the identity and access management posture to provide actionable results in collaboration with other members of the Cloud Security Team; follow-up with tasks executed by agencies and appropriate risk management strategies are undertaken; and assist the agency resources with security challenges and advise on remediation techniques.

Responsibilities will include:

• Ensure that cloud and on-prem technologies are integrated, tested, operated, and configured to meet the objectives of NYC Cyber Command’s defensive efforts.
• Responsible for the operation of key strategic defensive technologies including cloud-based security implementation controls and responder environments, network defenses, Citywide email filtering technology, and endpoint protection
• Provide guidance at various stages of planning and implementing security design, processes and solutions;
• Pivot between numerous technical projects and communicate status at different stakeholder levels;
• Document and report to management the execution phases and project-level solution deployment plans to leverage the NYC agencies' technology departments and executive leadership.
• Handle special projects and initiatives as assigned.

Hours / Shift

Day - Due to the necessary technical duties of this position in a 24/7 operation, candidate may be required to work various shifts such as weekends and/or nights/evenings.

Work Location

Brooklyn, NY

Minimum Qualifications

A baccalaureate degree from an accredited college and four years of satisfactory full-time experience related to projects and policies required by the particular position; or,

Education and/or experience which is equivalent to "1" above.

Preferred Skills

The successful candidate should possess the following skills and experience: Expert in knowledge of one of the following areas: - Information Security concepts related to Governance, Risk & Compliance - Proven track record of securing Data across multiple platforms - Understanding of Zero Trust framework - Office 365 and Microsoft Exchange Online Defender for Office 365, - Defender for Cloud Apps, Microsoft Purview, Azure Entra Active Directory security services (PIM, CAA, CA, MFA), and Azure AD Application Proxy) Knowledge of at least three of the following areas: - Mapping policies into security controls across on-premise, hybrid and cloud environments - SMTP routing and email security concepts - Common networking protocols and services including TCP, UDP, DNS, DHCP, HTTP, and LDAP - Developing and supporting Intune Endpoint MDM, MAM, & BYOD policies - Troubleshooting workstation (Windows, Mac) and server (Windows, Linux) issues - Scripting skills (Python, Bash, Powershell) - Microsoft Windows Server stack (Active Directory, DNS, WMI, DHCP, etc) - Change Management platforms and Scrum processes (ServiceNow, Jira, etc) - Ability to problem solve in situations of ambiguity and to work effectively and efficiently in a high pressure environment - Ability to pivot to work on emergent issues, events, or requests while keeping completing existing deliverables on time. - Experience in documenting systems designs and configurations of architected solutions this may include conceptual, logical, and physical diagrams new environment design documents write-ups on technical capabilities and solution configurations or runbooks for agency adoption. - Understanding of security and compliance policies and incident response processes ability to work with different agencies to determine sensitive data that needs to be protected with DLP and information protection technology based on the citywide standards and policies. - Ability to achieve goals with minimal supervision self-starter self-motivated and a capacity to get things done.

Public Service Loan Forgiveness

As a prospective employee of the City of New York, you may be eligible for federal loan forgiveness programs and state repayment assistance programs. For more information, please visit the U.S. Department of Education’s website at https://studentaid.gov/pslf/.

Residency Requirement

New York City Residency is not required for this position

Additional Information

The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.

OTI participates in E-Verify

APPOINTMENTS ARE SUBJECT TO OVERSIGHT APPROVAL

IT SECURITY SPECIALIST - 95622