Hybrid-Cloud Systems Engineer III

Port of Portland • Portland 97218, OR

1d • Hybrid

About The Position

The Port of Portland is hiring a Senior Hybrid - Cloud System Engineer (Security). The Senior Hybrid-Cloud System Engineer (Security) ensures the Port’s hybrid IT infrastructure is secure, resilient, and scalable by leading the design, integration, and deployment of modern cloud and on-premises technologies. This role serves as a technical security expert, partnering closely with Information Security to translate emerging threats and standards into effective operational controls. By architecting solutions across AWS, Azure, and on-premises environments, this position enhances the Port’s security posture and supports critical business objectives.

From the hiring manager: Imagine engineering the technology backbone of an international airport—where every system you touch keeps people moving safely and keeps operations running flawlessly. On our IT Infrastructure team, you won’t just maintain systems; you’ll shape them and keep them secure. We’re a tight-knit, constantly learning group that loves exploring new technologies and tackling complex challenges. From securing a mission-critical environment to driving emerging IT initiatives across the Port, you’ll work on standout projects that truly matter. If you’re energized by solving real-world problems at scale and want to grow in a culture that values curiosity, collaboration, and innovation, this is where your impact will take off.

Requirements

• Five (5) + years of progressive experience in Administration and/or engineering of cloud and hybrid infrastructure server environments.
• Bachelor’s Degree – Computer Science or related field, or a combination of related education, industry certification, and demonstrated experience.
• Ability to pass a criminal history records check to allow entry to secure airport areas (Grey Badge).
• CJIS background clearance (due to access to secure information at the airport).
• Clear credit check (due to access to sensitive financial information).

Nice To Haves

• Hybrid Cloud & Infrastructure Concepts: Architecture and operations across AWS, Azure, and on-premises platforms; virtualization; operating systems; enterprise identity systems; core infrastructure services.
• Security Frameworks & Principles: NIST CSF, CIS Controls, zero-trust architecture; IAM and PAM concepts; encryption, PKI, secrets management; policy-based security models.
• DevSecOps & Automation Foundations: CI/CD concepts, infrastructure-as-code methodologies, secure coding practices, GitOps principles, automated compliance validation.
• Architect and deliver secure hybrid-cloud solutions across AWS, Azure, and on-prem environments.
• Implement engineered security controls, secure deployment pipelines, and automated policy enforcement.
• Troubleshoot and resolve complex incidents spanning cloud, network, compute, and application layers.

Responsibilities

• Engineer secure, scalable, and operationalized cloud and on-prem infrastructure solutions using modern architectural frameworks and automation-first strategies.
• Develop, maintain, and optimize CI/CD pipelines with integrated security scanning, compliance validation, and deployment automation.
• Implement and manage infrastructure-as-code workflows and automation (Terraform, CloudFormation, Ansible, GitHub Actions, Jenkins).
• Design and administer application-layer, network, and cloud security controls, including firewalls, IAM policies, segmentation, and monitoring.
• Integrate complex systems and services with automated scanning, policy enforcement, and security instrumentation.
• Lead the design and implementation of secure hybrid-cloud architecture across AWS, Azure, and on-prem systems.
• Partner with the Information Security team to translate organizational security requirements into engineered controls, secure deployment patterns, and automated policy enforcement.
• Develop and maintain secure configuration standards, reference architectures, and runbooks for infrastructure and application-layer security technologies.
• Evaluate emerging technologies (AI, Kubernetes orchestration, service mesh architectures, GitOps workflows, and advanced cloud constructs) to drive innovation and organizational transformation.
• Respond as primary security engineer to hybrid-infrastructure security events, outages, and complex incident investigations.
• Conduct root cause analysis, implement containment and remediation actions, and lead preventative hardening efforts across multi-cloud and on-prem systems.
• Support internal, external security, and operational audits by providing technical documentation, system evidence, compliance reporting, and performing systems remediation activities.

Benefits

• The Port promotes safety as a Core value and we seek to eliminate harm through a culture of active prevention, curiosity, evaluation, and action.
• We comply with safety and health policies and procedures and consistently look for improvements that support operational excellence.
• The Port of Portland is dedicated to maintaining and improving a work environment, which extends equal opportunity to all individuals, regardless of their race, color, sex, age, religion, national origin, marital status, veteran status, disability or sexual orientation.
• Employment decisions shall be made in such a manner as to further the principle of equal employment opportunity and to comply with state, federal and local laws.
• We affirm through this policy statement our continuing commitment to the principles of nondiscrimination.
• Under Oregon law, qualified veterans may be eligible for veterans’ preference when applying for Port of Portland positions.
• The Port of Portland will conduct background checks and/or drug tests for positions where such tests are required by regulation and for other safety-sensitive positions.
• Accommodations will be considered for applicants or candidates with a qualifying disability that prevents them from participating in this process.
• Accommodations will be made where the Port can reasonably do so without imposing an undue hardship on the business or compromising the integrity of the recruitment process.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior