Security Operations Engineer - IT Security - Senior/Specialist - Permanent - 2026-06543

State of Washington • Thurston County – Olympia, WA

5d • Hybrid

About The Position

As the WDFW Enterprise Security Operations Engineer, you will play a key role in protecting the agency’s technology environment by designing, implementing, and monitoring application security solutions across both on-premises and cloud-based systems. In this role, you will serve as a trusted resource for IT teams, providing technical guidance and support related to application security and security operations. You will collaborate with other security and technology leaders, including the Incident Response Engineer, SEAL Team Supervisor, Data Center Architect, and Application Development Architect, to help address security risks, strengthen configurations, and support the agency’s overall cybersecurity mission.

Requirements

• Bachelor's degree from an accredited college or university in computer science or a closely related field.
• Seven (7) or more years of recent professional experience (within the last 10 years) working with infrastructure systems and cybersecurity risk assessment methodologies.
• Seven (7) or more years of recent professional experience (within the last 10 years) working with infrastructure systems and cybersecurity risk assessment methodologies.
• Four (4) or more years of recent professional, hands-on infrastructure administration experience (within the last 5 years), including experience with server configuration, virtualization platforms, and cloud services.
• Must pass fingerprint and background check due to working with law enforcement and sensitive data.

Nice To Haves

• Experience working in cloud-based environments, such as AWS and Azure.
• Experience managing a monitoring solution that includes the centralized collection of log file data.
• Certified Information Systems Security Professional (CISSP) certification.
• CompTIA Security+ certification.
• Microsoft certification(s).

Responsibilities

• Independently design, implement, and support WDFW Enterprise application security solutions for both on-premises and cloud-hosted environments, utilizing expertise in Windows Group Policy (GPO) configuration, system baseline configuration, registry edits, and scripting languages.
• Identify gaps in the agency’s security capabilities in comparison to industry standard threat research and best business practices such as the Center for Internet Security (CIS) Critical Security Controls (CSC).
• Conduct capability and integration assessments of commercial and custom solutions to ensure deployment and integration compliance.
• Coordinate with the Incident Response Engineer to ensure reviewed applications and services are integrated into the agency’s centralized monitoring and logging platform.
• Participate in “Tiger Team” architectural efforts to provide technical solutions to address agency problem sets.
• Lead and mentor team of Analysts in conducting internal security reviews for new and existing software and hardware requests, including agency systems such as the WILD licensing system, which issues commercial and recreational hunting and fishing licenses, and the Enforcement Records Management System (RMS) utilized for the processing and storing of Criminal Justice Information (CJI).
• Conduct project-specific risk assessments of WDFW applications and systems, developing and implementing remediation actions as needed.
• Review system architecture, configurations, and processes to identify potential security risks, recommend corrective actions, and develop custom configurations through scripting to support business units.
• Maintain Plans of Action and Milestones (POAM).
• Analyze WDFW vulnerability assessment reports to evaluate agency risk and develop remediation actions.
• Conduct Washington State Office of Cybersecurity (OCS) Design reviews for infrastructure and functional areas supported by this position.
• Provide senior-level guidance to the staff responsible for risk assessment, vulnerability management, and configuration management activities.
• Mentor team members and contribute to the continuous improvement of security operations processes and practices.
• Ensure staff maintain accurate documentation and performance metrics that clearly reflect completed work and the agency's risk and vulnerability posture to support informed management decisions.
• Collaborate with peer engineers and architects to resolve prioritization conflicts related to security operations initiatives.
• Review and provide feedback for security-related policy while documenting processes, procedures, and techniques that support the security policy.
• Produce and maintain accurate security documentation, including processes, procedures, and techniques for both on-premises and cloud solutions.
• Provide operational support to the CSU Incident Response Engineer during periods of increased workload caused by scheduled or unscheduled staff absences, year-end budget activities, or other operational demands. Support may include threat detection, incident response, and mentoring staff as needed.

Benefits

• While this position may offer a telework option, the successful candidate must be available to report to the duty station on a weekly basis.
• In addition to pay and other special employee programs , there are other benefits that WDFW employees may be eligible for.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior