System Administrator Senior

Arizona Department of Administration•Phoenix, AZ

2d•Hybrid

About The Position

The Department of Economic Security (DES), and the Division of Technology Services (DTS), is seeking an experienced and highly motivated professional to join our team as a Systems Administrator Senior. The Systems Administrator Senior (Junior Security Architect) will support IT Security management in the technical assessment of new and existing services and solutions within the agency. This includes documentation of solutions, as well as providing recommendations and guidance concerning proper Security Architecture implementation. This role regularly reviews existing agency IT policies and procedures, identifies deficiencies, and recommends changes based upon current regulations and best practices. Active participation in the development, maintenance, and improvement of agency Security standards is required. This position may offer the ability to work remotely, within Arizona only, based upon the department's business needs and continual meeting of expected performance measures. The State of Arizona strives for a work culture that affords employees flexibility, autonomy, and trust. Across our many agencies, boards, and commissions, many State employees participate in the State’s Remote Work Program and are able to work remotely in their homes, in offices, and in hoteling spaces. All work, including remote work, should be performed within Arizona unless an exception is properly authorized in advance.

Requirements

Bachelor’s degree plus 5 or more years of experience in systems administration, Information Security Analysis (or equivalent experience).
Employees shall obtain and maintain a valid Level One fingerprint clearance card that meets DES requirements for a Level One card pursuant to Arizona Revised Statute 41-1969.
Successfully pass background and reference checks; employment is contingent upon completion of the above-mentioned process and the agency’s ability to reasonably accommodate any restrictions.
Knowledge of Cloud Architecture & Security
Knowledge of Computer Operating Baseline Hardening
Knowledge of Security and Privacy Controls for Information Systems [NIST sp800-53r5]
Knowledge of Cryptography & PKI
Knowledge of Threat Modeling & Risk Assessment
Knowledge of Computer networking concepts and protocols
Knowledge of API integration, authentication, Security Best Practices
Skills In Network/System Document and Diagram Creation
Skills In Strong Written and Verbal Communication
Skills In Analytical and Critical Thinking
Skills In Scripting and Security Automation
Skills In Compliance & Security Control Translation, operational needs versus agency standards and policies
Skill in reviewing network diagrams and configurations to identify compliance gaps, single points of failure, and deviations from secure design principles
Skill in identifying structured and unstructured data for purposes of classification and application of associated protection mandates
Ability to Evaluate systems against common Security frameworks (NIST, MITRE ATT&CK, CIS Controls, OWASP] to identify gaps in the required security posture
Ability to Understand the appropriate usage of common networking protocols [HTTP(s), DNS, SMPT, SSH, SNMP]
Ability to Translate complex, technical security metrics into clear, actionable, and business-friendly updates for cross-functional teams
Ability to Work collaboratively in teams and across organizations
Ability to Synthesize feedback and adjust plans accordingly

Nice To Haves

CompTIA Security+
Microsoft Certified: Azure Fundamentals OR AWS Certified Cloud Practitioner.

Responsibilities

Actively assist with the enablement and maturation of Cloud Security Services.
Assist Security Analysts and other technical operations teams with posture management prioritization and implementation recommendations concerning controls to block or mitigate attack techniques.
Actively manage the agency baseline hardening program to ensure all agency systems meet the agency minimum security configuration standards. This includes conducting system assessments, identification of weaknesses, implementing remediation strategies to reduce risk.
Actively participate in the maintenance and assessment of existing and future agency security solutions. Ensure security services are optimally configured, deployed, and maintained.
Evaluate proposed agency services and solutions to determine the adequacy of security design and architecture in relation to agency requirements.
Document and communicate findings to stakeholders.
Collaborate with cross-functional teams to develop, review, and update security policies and standards that align with organizational requirements and regulatory compliance.
Stay current on industry best practices and emerging threats to continuously improve the quality of these standards.
Assess security risks, ranking the risk of various digital assets, and suggest basic mitigation controls.

Benefits

Affordable medical, dental, life, and short-term disability insurance plans
Participation in the Arizona State Retirement System (ASRS) and long-term disability plans
10 paid holidays per year
Paid vacation and sick time
Paid Parental Leave-Up to 12 weeks per year paid leave for a newborn or newly-placed foster/adopted child.
Deferred compensation plan
Wellness plans
Tuition Reimbursement
Stipend Opportunities
Infant at Work Program
Rideshare and Public Transit Subsidy
Career Advancement & Employee Development Opportunities