Sr. Hybrid-Cloud System Eng.*

Port of Portland; Portland (OR); Hybrid; USD 130,000 - 180,000; Full time

Job summary

Port of Portland seeks a Senior Hybrid-Cloud System Engineer (Security) to lead secure design and deployment of cloud and on-prem infrastructure. This role partners with Information Security to translate threats into effective controls across AWS, Azure, and on‑prem environments, enabling the Port’s ERP modernization and secure operations.

The position emphasizes incident response, automated policy enforcement, and secure configuration standards to support a scalable, resilient IT backbone.

Qualifications

• Five (5) + years of progressive experience in administration and/or engineering of cloud and hybrid infrastructure server environments.
• Bachelor’s Degree – Computer Science or related field, or a combination of related education, industry certification, and demonstrated experience.
• Ability to pass a criminal history records check to allow entry to secure airport areas (Grey Badge).
• CJIS background clearance due to access to secure information at the airport.

Responsibilities

• Engineer secure, scalable, and operationalized cloud and on-prem infrastructure solutions using modern architectural frameworks and automation‑first strategies.
• Develop, maintain, and optimize CI/CD pipelines with integrated security scanning, compliance validation, and deployment automation.
• Implement and manage infrastructure‑as‑code workflows and automation (Terraform, CloudFormation, Ansible, GitHub Actions, Jenkins).
• Design and administer security controls across application-layer, network, and cloud environments and monitor for policy compliance.

Skills

Cloud security

CI/CD pipelines

DevSecOps

Incident response

Automation

Education

Bachelor's Degree in Computer Science or related field

Tools

Terraform

CloudFormation

Ansible

GitHub Actions

Jenkins

Job description

The Port of Portland is hiring a

Senior Hybrid-Cloud System Engineer (Security)*

The Senior Hybrid-Cloud System Engineer (Security) ensures the Port’s hybrid IT infrastructure is secure, resilient, and scalable by leading the design, integration, and deployment of modern cloud and on-premises technologies. This role serves as a technical security expert, partnering closely with Information Security to translate emerging threats and standards into effective operational controls. By architecting solutions across AWS, Azure, and on-premises environments, this position enhances the Port’s security posture and supports critical business objectives.

From the hiring manager:

Join us at a pivotal moment in the Port of Portland’s technology transformation. The Port Forward ERP program is modernizing our enterprise systems—Workday, Maximo, integrations, identity, cloud, and security services to create a more efficient, data-driven, and future-ready organization. This initiative isn’t just a system upgrade; it’s a full re-architecture of how the Port operates, collaborates, and delivers services across all business lines.

As a Systems Engineer on our IT Infrastructure Operations team, you’ll be at the center of this transformation. You’ll design and support the foundational identity, network, cloud, and security services that power our new ERP ecosystem—ensuring stability, security, and long‑term sustainability. Your work directly enables enterprise‑critical integrations, modern architecture alignment, and the reliability our future operations depend on.

If you want to solve complex engineering challenges, influence enterprise architecture, and help build the future state of technology at the Port, this is a rare opportunity to make a lasting impact.

*This is a limited-duration role lasting approximately 24 – 36 months to assist the Port of Portland with an ERP implementation. The role may be lengthened or shortened based on business need.

Hybrid Infrastructure Engineering and Automation

• Engineer secure, scalable, and operationalized cloud and on-prem infrastructure solutions using modern architectural frameworks and automation‑first strategies.
• Develop, maintain, and optimize CI/CD pipelines with integrated security scanning, compliance validation, and deployment automation.
• Implement and manage infrastructure‑as‑code workflows and automation (Terraform, CloudFormation, Ansible, GitHub Actions, Jenkins).
• Design and administer application‑layer, network, and cloud security controls, including firewalls, IAM policies, segmentation, and monitoring.
• Integrate complex systems and services with automated scanning, policy enforcement, and security instrumentation.

Security Engineering and Architecture

• Lead the design and implementation of secure hybrid‑cloud architecture across AWS, Azure, and on‑prem systems.
• Partner with the Information Security team to translate organizational security requirements into engineered controls, secure deployment patterns, and automated policy enforcement.
• Develop and maintain secure configuration standards, reference architectures, and runbooks for infrastructure and application‑layer security technologies.
• Evaluate emerging technologies (AI, Kubernetes orchestration, service mesh architectures, GitOps workflows, and advanced cloud constructs) to drive innovation and organizational transformation.

Security and Operational Incident Response and Compliance

• Respond as primary security engineer to hybrid‑infrastructure security events, outages, and complex incident investigations.
• Conduct root cause analysis, implement containment and remediation actions, and lead preventative hardening efforts across multi‑cloud and on‑prem systems.
• Support internal, external security and operational audits by providing technical documentation, system evidence, compliance reporting and performing system remediation activities.

Full position description available upon request.

MUST HAVE!

• Five (5) + years of progressive experience in Administration and/or engineering of cloud and hybrid infrastructure server environments.
• Bachelor’s Degree – Computer Science or related field, or a combination of related education, industry certification, and demonstrated experience.
• Ability to pass a criminal history records check to allow entry to secure airport areas (Grey Badge).
• CJIS background clearance (due to access to secure information at the airport).
• Clear credit check (due to access to sensitive financial information).

Senior‑level Knowledge, Skills & Abilities desired for this role

• Hybrid Cloud & Infrastructure Concepts: Architecture and operations across AWS, Azure, and on‑premises platforms; virtualization; operating systems; enterprise identity systems; core infrastructure services.
• Security Frameworks & Principles: NIST CSF, CIS Controls, zero‑trust architecture; IAM and PAM concepts; encryption, PKI, secrets management; policy‑based security models.
• DevSecOps & Automation Foundations: CI/CD concepts, infrastructure‑as‑code methodologies, secure coding practices, GitOps principles, automated compliance validation.
• Architect and deliver secure hybrid‑cloud solutions across AWS, Azure, and on‑prem environments.
• Implement engineered security controls, secure deployment pipelines, and automated policy enforcement.
• Troubleshoot and resolve complex incidents spanning cloud, network, compute, and application layers.

Selection Process (tentative schedule):

• A minimum qualification evaluation of the education, training, and experience of submitted application packets will take place by Talent Acquisition until this role closes.
• A Subject Matter Expert (SME) Panel will perform an evaluation of experience and training taken from your employment application materials.
• Our goal is to notify candidates who are selected for interviews the week following the close of the posting. We will then schedule the virtual first round of interviews with candidates who successfully passed the SME evaluation. Panel Interviews will be held afterward.