Engineer - Security (Immediate Opening)

IDEA Public Schools is hiring an Information Security Engineer to implement and maintain operational security controls that protect its technology resources. The role maintains security architecture, validates configurations, assesses risks and vulnerabilities, and recommends improvements to the organization’s security posture.

Responsibilities:

• Review security architecture to identify gaps, vulnerabilities, and deficiencies within the network and recommend appropriate solutions
• Design, administer, and maintain the organization's security architecture, including secure file transfer systems, Web Application Firewalls (WAF), Security Information and Event Management (SIEM), firewalls, VPNs, Zero Trust solutions, endpoint protection, AI Guardrails, and other critical security technologies
• Perform security validation reviews to ensure network devices and systems are properly configured, tested, implemented, and maintained through upgrades, patches, and updates in accordance with established security standards
• Evaluate and recommend new security solutions or enhancements to existing technologies to strengthen the organization's overall security posture
• Research emerging cybersecurity threats, technologies, and industry trends to recommend and implement improvements to existing security systems and processes
• Perform other related duties and responsibilities as assigned
• Reviews security architecture to identify gaps or deficiencies within the network in order to resolve issues or find a solution
• Administers, designs, and maintains the IT security architecture, including the district’s secure file transfer system, WAF, SEIM, firewall, VPN, Zero-Trust, end point, and all other security and application areas
• Performs validation reviews to ensure that network devices are tested, implemented, and maintained via upgrades, patches, and updates with appropriate security controls
• Recommends security solutions or enhancements to existing security solutions to improve overall enterprise security
• Research IT security issues and industry trends to make recommendations and implement modifications for internal improvement
• Performs related duties as assigned
• Foster a culture of continuous improvement and operational excellence
• Develop and maintain standardized security configurations aligned with industry best practices
• Ensure adherence to established change management policies and procedures
• Develop and maintain clear communication plans and implementation schedules
• Provide technical guidance, support, and cross-training to Security Analysts
• Utilize recognized cybersecurity frameworks and industry best practices to ensure organizational security requirements are met
• Review security alerts, trends, and emerging threats to proactively recommend improvements to the organization's security posture
• Analyze security reports and vulnerability scan results to identify, document, prioritize, and track risks through remediation
• Ensure network infrastructure and security systems follow established patch management schedules
• Monitor and evaluate security controls to ensure their effectiveness in protecting organizational systems and data
• Collaborate with technical teams to develop and implement remediation plans that address identified security risks
• Effectively communicate complex technical information to both technical and non-technical audiences in a clear and understandable manner
• Share technical knowledge, industry trends, and best practices with leadership and cross-functional teams
• Collaborate with internal teams and stakeholders to communicate security risks, recommendations, and technical solutions
• Provide timely updates on security initiatives, system changes, incidents, and potential risks to appropriate stakeholders
• Promote security awareness and best practices through knowledge sharing, training, and collaboration across the organization

Requirements:

• Associate's degree in technology field
• Bachelor's degree preferred
• Information Security or Network Related Certifications (Security +, Network +, GSEC, CYSA+,  CCNA, CEH, GCIH) preferred