Senior Security Engineer

DivIHN Integration•Springfield, MO

16d•Onsite

About The Position

Under the general direction of the Data Systems Manager, the Senior Security Engineer performs complex professional and advisory security administration functions, using substantial creativity and originality to achieve objectives. The role researches, plans, installs, implements, configures, documents, maintains, communicates, and coordinates work involving hardware, software, and operating systems on specified platforms, and develops complex integrations between systems and applications. The position serves as a designated lead worker. The engineer maintains security-focused solutions, including standalone and software-as-a-service solutions, for the Office of the Illinois Secretary of State. This includes installation, configuration, training, diagnostic, and administrative support. The role also provides setup, configuration, and maintenance for on-premises and cloud-based security solutions. The position designs and maintains cloud and secure configuration controls, assesses risks and configurations, supports security monitoring and remediation, and administers agency email security systems. It collaborates with infrastructure, application, security, system-owner, administrator, and client teams to promote secure, reliable, and compliant operations. This is an onsite role in Springfield, Illinois, scheduled for 37.5 hours per week at 7.5 hours per day. The posting describes a 3–6 month duration with the possibility of contract-to-hire. Only W-2 candidates are eligible; third-party and C2C candidates will not be considered.

Requirements

At least 5 years of experience in IT security, cybersecurity engineering, or security administration.
Hands-on experience securing and administering cloud environments, networking, storage, infrastructure, and platform services.
Experience establishing, reviewing, and maintaining secure configuration baselines for servers, endpoints, network devices, cloud resources, and security tools.
Knowledge of NIST security frameworks and publications, including NIST SP 800-53 and configuration management controls.
Experience monitoring security alerts, investigating suspicious activities, identifying security misconfigurations, and supporting remediation.
Ability to conduct security configuration reviews, identify vulnerabilities and compliance gaps, assess risks, and recommend corrective actions.
Experience reviewing system changes, validating security configurations, documenting exceptions, and ensuring compliance with security policies and standards.
Experience administering and monitoring email security solutions, including anti-phishing, anti-spam, malware protection, and email security policies.
Ability to document security standards, procedures, configuration changes, assessment findings, and remediation plans while coordinating with infrastructure, application, and security teams.
Must be eligible for W-2 employment; third-party and C2C candidates are not considered.
Must work onsite in Springfield, Illinois.

Responsibilities

Research, plan, install, implement, configure, document, maintain, communicate, and coordinate hardware, software, and operating-system work for specified platforms.
Develop complex integrations between systems and applications.
Serve as a designated lead worker.
Provide installation, configuration, training, diagnostic, and administrative support for security-focused solutions, including standalone and SaaS solutions.
Set up, configure, and maintain on-premises and cloud-based security solutions.
Design, implement, and maintain security controls for cloud infrastructure, storage, networking, identity services, and platform services.
Support secure configuration and administration of cloud platforms.
Partner with infrastructure and application teams to embed security requirements into cloud architecture, deployment pipelines, and operational processes.
Configure and monitor security solutions to detect and respond to cloud security alerts, suspicious activity, indicators of attack, and indicators of misconfiguration.
Conduct security assessments, technical reviews, and risk analyses for cloud services, architectures, and proposed changes.
Lead alignment of configuration management practices with applicable NIST frameworks and publications.
Review system configurations for deviations from approved baselines, security standards, and organizational requirements.
Monitor configuration changes to ensure they are requested, reviewed, approved, documented, tested, and implemented appropriately.
Work with system owners, administrators, and security personnel to remediate non-compliant or unauthorized configurations.
Establish, maintain, and improve secure configuration standards for agency information systems, endpoints, servers, network devices, cloud resources, and security tools.
Ensure systems follow approved security baselines, policies, regulatory requirements, and best practices.
Collaborate with IT teams to strengthen the agency’s security posture through configuration governance and technical control validation.
Administer, monitor, and maintain agency email security systems and controls.
Coordinate with IT teams, security, and clients to ensure secure, reliable, and compliant email operations.