Job Description

The Public Works Security Engineer role will be a pivotal position with assisting, implementing and supporting the Public Works IT Security Program to ensure compliancy with all CCSF cybersecurity requirements and supporting Public Works specific policies and procedures.  This role will work with various internal and external group for overall cyber security stance providing domain specific security knowledge, expertise and experience.

Under general supervision, assists in analyzing, planning, implementing, maintaining, troubleshooting and enhancing large complex systems or networks consisting of a combination that may include personal computers, mobile devices, LANS, WANs, servers, data storage and the physical and logical components that integrate these systems together as an enterprise networking backbone.

This position will perform a wide range of complex analytical, design, planning, implementation, enhancement and problem resolution tasks on large complex systems and networks. Works within a framework of established procedures and interprets policies, procedures and guidelines. This level may formulate recommendations consistent with directives, policies, standards and regulations. Incumbents require only occasional instruction or assistance. Work is reviewed upon completion and for overall results. Serves as a technical architect and systems integrator for large complex systems or networks, with a focus on securing vulnerabilities and reducing risk of system and/or asset compromises.

ESSENTIAL DUTIES:

1.       Act as the liaison between vendors, technical support hot-lines and departments to resolve complex systems or network problems. Assist in the coordination and implementation of corrective measures; this may involve site visits, telephone assistance, remote systems or network management, and participation in technical committees

2.       Plan, implement and maintain upgrades/updates/fixes for core operating systems and their related components, without negative impact to the overall availability and reliability of the enterprise systems/networks

3.       Assist with development, implementation and maintenance of backup and disaster recovery procedures for large systems and networks

4.       Assist with development, implementation, and maintenance of Public Works Security Program consistent with various security frameworks

5.       Work with Public Works IT bureau, overall department, and external departments to ensure compliancy to security policies, procedures, standards, and guidelines

6.       Plan, develop, implement, and support various security related systems including Active Directory/Identity management, Endpoint Detection and Response, Mobile Device Management, multi-factor authentication, whole disk encryption and SCCM/Other Patching systems

7.       Provide and mentor technical and non-technical staff in cybersecurity best practices by informal and formal means

8.       Work on assigned projects including strategic, operational and maintenance

9.       Provide compensated 24-hour on-call support to ensure rapid recovery from software or hardware problems for mission-critical systems and network

10.    Provide compensated scheduled and best-effort unscheduled assistance during off-hours and weekends for IT tasks including fixing services being down, software patching, migration, implementation, and upgrades

Qualifications

EDUCATION:

An associate degree in computer science or a closely related field from an accredited college or university OR its equivalent in terms of total course credits/units [i.e., at least sixty (60) semester or ninety (90) quarter credits/units with a minimum of twenty (20) semester or thirty (30) quarter credits/units in computer science or a closely-related field].

EXPERIENCE:

Two (2) years of experience analyzing, installing, configuring, enhancing, and/or maintaining the components of an enterprise network.

SUBSTITUTION:

Additional experience as described above may be substituted for the required degree on a year-for-year basis (up to a maximum of two (2) years). One (1) year is equivalent to thirty (30) semester units/r forty-five (45) quarter units with a minimum of 10 semester / 15 quarter units in computer science or a closely related field.

DESIRABLE QUALIFICATIONS:

1.       ITIL Foundation Certification (or within 1 year of hire)

2.       Industry Security Certification such as CompTia Security+ or Certified Information Systems Security Professional

3.       Microsoft Azure Administrator Certification

4.       Exposure to System Incident and Event Management System (SIEM like Splunk, or Azure Sentinel)

5.       Work with or have been part of Security Operation Center (SOC) or System Incident Response Team (SIRT)

Additional Information

SALARY: $119,028 - $149,734 annually

HOW TO APPLY: Please submit an online application as soon by filing deadline on Wednesday November 3, 2021 to be considered for this opportunity.

APPOINTMENT TYPE: Permanent-Exempt. The San Francisco Public Works Department has an opening for an exempt appointment in San Francisco. The position is excluded by the Charter from competitive civil service examination process. The successful candidate shall serve at the discretion of the appointing officer. This position has an anticipated duration of up to three (3) years.

If you have any comments or questions regarding this recruitment, please contact the analyst, Raquel Knighten, by telephone at 415-554-6059 or by email at raquel.knighten@sfdpw.org.

All your information will be kept confidential according to EEO guidelines.

CONDITION OF EMPLOYMENT:  All City and County of San Francisco employees are required to be vaccinated against COVID-19 as a condition of employment.  For details on how it is applicable to your employment, please click here.

The City and County of San Francisco encourages women, minorities and persons with disabilities to apply. Applicants will be considered regardless of their sex, race, age, religion, color, national origin, ancestry, physical disability, mental disability, medical condition (associated with cancer, a history of cancer, or genetic characteristics), HIV/AIDS status, genetic information, marital status, sexual orientation, gender, gender identity, gender expression, military and veteran status, or other protected category under the law.