Enterprise Security Engineer

City of Scottsdale • Az 85251, AZ

8h • Remote

About The Position

The Enterprise Security Engineer Installs, configures, maintains and provides ongoing support and administration for all information security systems, including firewalls, web and email filtering, VPNs, IDS/IPS, WAF, secure file transfer, and other security solutions for all city departments including critical infrastructure such as Water/SCADA and Traffic. Monitors and assesses security risks and violations with the city's computing systems, communications networks and other data processing assets. Enforces security standards, policies, and solutions for the enterprise computing environment. Assists with architecting a secure computing environment and secure network design. This position is responsible for the design, engineering and continuous optimization of the city's enterprise security architecture, with a primary focus on Palo Alto Network's next generation firewall platforms and network security controls. The successful candidate will: Serve as the enterprise owner and subject matter expert for Palo Alto Networks platforms, including next-generation firewalls, Panorama, GlobalProtect, and advanced threat prevention services. Lead firewall architecture design, segmentation strategy, and policy lifecycle management, ensuring alignment to Zero Trust principles. Drive continuous optimization of firewall rule sets, eliminating redundancy, reducing attack surface, and improving performance and manageability. Ensure high availability and resiliency of network security infrastructure, including failover design, upgrades, and lifecycle management. Integrate Palo Alto capabilities with SIEM, endpoint, and threat intelligence platforms to enhance detection and response.

Requirements

• Bachelor's Degree from an accredited educational institution in Computer Science or related field.
• A minimum of five years' experience in systems analysis or design, testing and implementation of computer-based information systems and project management experience working on multiple projects and assignments simultaneously required.
• Every person employed by the City of Scottsdale shall reside in the State of Arizona during his or her active employment by the City, regardless of whether the employee is approved to remote work.

Nice To Haves

• One or more recognized information security certification such as Certified Information Systems Security Professional (CISSP), Global Information Assurance Certification (GIAC), Certified Information Security Manager (CISM), Security+, etc.
• ACJIS TOC-D certification within 1 month of hire.

Responsibilities

• Installs, configures, maintains and provides ongoing support and administration for all information security systems, including firewalls, web and email filtering, VPNs, IDS/IPS, WAF, secure file transfer, and other security solutions for all city departments including critical infrastructure such as Water/SCADA and Traffic.
• Monitors and assesses security risks and violations with the city's computing systems, communications networks and other data processing assets.
• Enforces security standards, policies, and solutions for the enterprise computing environment.
• Assists with architecting a secure computing environment and secure network design.
• Responsible for the design, engineering and continuous optimization of the city's enterprise security architecture, with a primary focus on Palo Alto Network's next generation firewall platforms and network security controls.
• Serve as the enterprise owner and subject matter expert for Palo Alto Networks platforms, including next-generation firewalls, Panorama, GlobalProtect, and advanced threat prevention services.
• Lead firewall architecture design, segmentation strategy, and policy lifecycle management, ensuring alignment to Zero Trust principles.
• Drive continuous optimization of firewall rule sets, eliminating redundancy, reducing attack surface, and improving performance and manageability.
• Ensure high availability and resiliency of network security infrastructure, including failover design, upgrades, and lifecycle management.
• Integrate Palo Alto capabilities with SIEM, endpoint, and threat intelligence platforms to enhance detection and response.

Benefits

• 2 Paid Holidays, which includes 1 Floating Holiday
• Vacation Accrual; starts at 10.3 hours/month
• Sick Leave Accrual; 8 hours/month
• Medical (which includes behavioral health coverage), Dental and Vision Benefits
• City Paid Basic Life Insurance (equal to one times employee annual salary); option of Supplemental Life Insurance
• Tuition Reimbursement; $2,500/year
• Participation in the Arizona State Retirement System (ASRS) Defined benefit plan with mandatory employer and employee contributions currently at 12% which includes a Long-Term Disability benefit
• Supplemental Retirement Plans through Nationwide; 457
• Pet Insurance
• Bilingual pay compensation
• Employer contribution of $10 per pay period to employee's PEHP (Post-Employment Health Plan) account

What This Job Offers

• Job Type: Full-time
• Career Level: Senior