Senior Security Engineer

State of Delaware•Dover, DE

3d•Hybrid

About The Position

The Senior Security Engineer provides security engineering support for the Department of Technology & Information’s cloud environments, applications, and identity services. The role delivers services efficiently, meets the needs of DTI and other state agencies, and complies with DTI policies and procedures. The engineer works collaboratively with infrastructure, application development, security, and agency teams to design, implement, maintain, and troubleshoot security controls. The position requires technical expertise across cloud, application, and identity security. Areas include cloud security platforms and configuration management; cloud identity and access management, privileged access, and secrets management; IAM administration and support, including SSO, MFA, application integrations, access policies, and user lifecycle management; application and API security; application security testing, secure code review, and vulnerability remediation; secure architecture reviews and threat modeling; and security automation, infrastructure as code, and development and deployment pipeline integration. The role also troubleshoots cloud, application, and identity security issues in collaboration with technical teams and vendors. A hybrid schedule may be available, with at least two days per week in the office; further details are provided during the interview process. Employment is contingent on a satisfactory fingerprint-based criminal background check. Applicants must be legally authorized to work in the United States; DTI does not provide employment-based sponsorship.

Requirements

At least 5 years of hands-on experience in an enterprise IT environment, including cybersecurity, infrastructure engineering, or software development.
At least 3 years of technical engineering experience in cloud security and/or application security, including hands-on experience in both areas.
Experience implementing and supporting security controls in at least one major cloud platform, such as Microsoft Azure, Amazon Web Services (AWS), or Google Cloud.
Experience identifying, validating, and remediating application or API vulnerabilities through security testing, secure code review, or threat modeling.
Experience implementing identity and access controls, secure configurations, and protections for sensitive data across cloud environments and applications.
Experience using scripting, infrastructure as code, or development and deployment pipelines to automate security controls or security testing.

Nice To Haves

Bachelor’s degree in information technology, computer science, cybersecurity, or a related field.
Certification in cloud cybersecurity, application security, or identity and access management relevant to the assigned services.
Experience integrating applications with Okta using SAML, OpenID Connect (OIDC), OAuth 2.0, or SCIM.
Experience securing cloud-native applications, containers, serverless services, or software supply chains.
Experience applying NIST security frameworks, CIS Benchmarks, or OWASP application security guidance.

Responsibilities

Provide security engineering support for DTI cloud environments, applications, and identity services.
Collaborate with infrastructure, application development, security, and agency teams to design, implement, maintain, and troubleshoot security controls.
Support cloud security platforms, services, and configuration management.
Administer and support identity and access management, including SSO, MFA, application integrations, access policies, and user lifecycle management.
Support privileged access and secrets management.
Perform application and API security work, including security testing, secure code review, and vulnerability remediation.
Conduct secure architecture reviews and threat modeling.
Automate security controls and testing using scripting, infrastructure as code, and development and deployment pipelines.
Troubleshoot cloud, application, and identity security issues with technical teams and vendors.
Deliver services efficiently, meet the needs of DTI and state agencies, and comply with DTI policies and procedures.

Benefits

Group health plan
Dental plan
Vision plan
Prescription coverage
Flexible spending accounts for health and dependent care
Long- and short-term disability insurance
Group universal life insurance
Accident and critical illness insurance
Health management programs
21 paid vacation days
15 paid sick days
13 paid holidays
Up to 12 weeks of paid parental leave
Tuition reimbursement up to $4,000 annually
State-funded learning opportunities
Mentor programs
Professional development opportunities
Employee Assistance Program, including professional counseling, legal, and financial services
Employer- and employee-funded pension plan
Employee-funded retirement savings plan