Information Technology Security Administrator

We need to produce HTML fragment with headings

for sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. Remove boilerplate, navigation, legal, EEO, etc. Also remove duplicated lines. Preserve all substantive info. We have introduction and representative duties, position overview, occupational information, minimum qualifications, preferred qualifications, technical expertise, etc. Also there is "How to Apply" and applicant info which we should drop (application instructions). Also "Occupational Information" maybe includes physical requirements etc. We need to map content to sections. We need to decide which sections to include: About the role (position overview), Responsibilities (representative duties), Requirements (minimum qualifications), Qualifications (preferred qualifications?), Skills (technical expertise), Benefits (maybe not present), Pay (not present), Schedule (maybe mention occasional after-hours/weekend work, periodic overnight travel). That could go under Schedule? Or maybe under Requirements? The instruction: include a section ONLY when posting has real, specific content for it. So we need to see if there is specific content for Benefits, Pay, Schedule. The posting mentions: "Employees of the U.S. District Court serve under 'Excepted Appointments' and are considered 'at will' employees ... court employees are entitled to substantially the same benefits as other Federal Government employees." That's a benefit statement but vague. It says "substantially the same benefits as other Federal Government employees." That's not specific detail; but it's still a statement about benefits. The instruction says never emit a heading followed by filler/placeholder text (e.g., "commensurate with experience", "not specified", "N/A", "varies", "TBD") and never create Pay/Schedule/Benefits sections unless the posting actually states them. The phrase "substantially the same benefits as other Federal Government employees" is somewhat generic but still states that there are benefits. Might be acceptable? However it's not specific like health insurance, retirement. Might be considered filler? The instruction says avoid filler/placeholder text like "commensurate with experience", "not specified", "N/A", "varies", "TBD". This is not exactly those, but still vague. I'd lean to not include Benefits section because it's not specific detail. Similarly Pay: no mention of salary. Schedule: mention occasional after-hours and weekend work, periodic overnight travel. That's specific enough for schedule. So we can include Schedule section with that info. Thus sections: About the role (position overview), Responsibilities (representative duties), Requirements (minimum qualifications), Qualifications (preferred qualifications), Skills (technical expertise), Schedule (after-hours/weekend work, overnight travel). Possibly also include "Occupational Information" like physical requirements (ability to lift 50 pounds, mobility). That could go under Requirements or maybe a separate section? But we only have predefined headings; we could put physical requirements under Requirements (maybe as part of minimum qualifications). Or we could create a separate section but not allowed headings. So we incorporate into Requirements. We must not repeat job title as heading. No Job ID. We must output only HTML fragment, no markdown. We need to use

for section headings,

• for any list of duties/requirements/benefits, and

  for prose. We need to preserve all substantive information, not invent or summarize away detail. So we need to keep details like specific tools, etc. We need to avoid duplication: The representative duties appear duplicated in the text (twice). We need to deduplicate. We need to remove boilerplate like "Introduction and Representative Duties This position is open until filled with preference given to applications received by 10/14/2026." That's date info; maybe we can keep as part of About the role? It's about application deadline; but instruction says remove application instructions. The date is about preference for applications; that's application-related. Probably drop. We need to keep "Position Overview" content. Let's extract sections. **About the role** (Position Overview): - The United States District Court is seeking an Information Technology Security Administrator in Phoenix, Arizona. - This position is part of a consolidated Systems Technology Division and reports to a Systems Technology Division Manager. - The IT security administrator evaluates, designs, implements and maintains the court’s cybersecurity posture across network infrastructure, cloud and hybrid environments, applications, endpoints and telecommunications. - This role serves as a technical specialist and advisor on information security, risk mitigation, incident response and compliance for judges, court executives, probation officers and staff for the District of Arizona, encompassing seven offices and approximately 600 end users. We could also include the location Phoenix, Arizona. **Responsibilities** (Representative Duties) - need to list each duty area as bullet points. We have many duty areas repeated; we need to consolidate unique items: - Security strategy and program oversight: Review, evaluate and make recommendations regarding the court’s IT security program, covering network infrastructure, cloud resources (Microsoft 365, Azure and AWS), custom applications, commercial off-the-shelf software, VoIP, and mobile and remote access solutions. - Threat and vulnerability management: Conduct continuous security assessments, risk analyses and vulnerability scans across planned and installed systems. Identify weaknesses, coordinate patch management and deploy endpoint detection and response (EDR and XDR) tools to mitigate threats. Notify management promptly of critical vulnerabilities. - Policy and framework administration: Develop, implement and maintain local court security policies, guidance and operational procedures aligned with national judiciary frameworks. Create templates, guidelines, checklists and documentation to support compliance and Zero Trust security principles. - Advisory and training services: Provide technical advice on IT security architecture, data protection and risk management to judges, court unit executives and IT management. Develop and deliver cybersecurity awareness training and documentation for court personnel. - Security operations and tool management: Act as team lead in configuring, administering and monitoring automated security tools, including next-generation firewalls, intrusion detection and prevention systems, web security gateways, SIEM and SOAR platforms (such as Splunk and Microsoft Sentinel), and identity management systems. Monitor SPAM mailbox for Phishing attempts and scan suspicious attachments as needed. - Automation and scripting: Write and maintain scripts using PowerShell, Python and Bash to automate security checks, streamline administrative workflows, enforce system configurations and parse security logs. - Infrastructure and identity management: Perform advanced Active Directory and Microsoft Entra ID security architecture design, Group Policy Object management and access control enforcement. Support secure end-user workstation settings, virtual server infrastructure, multi-factor authentication, and Zero Trust network access solutions. - Incident response and collaboration: Coordinate and execute incident response procedures. Collaborate with key judiciary stakeholders, including the Administrative Office, the 9th Circuit IT security officer, federal court IT peers and commercial service providers. - Network and systems engineering support: Provide specialized technical support for local and wide area network infrastructure, virtualized server environments (VMware vSphere), storage area networks, IP routing and switching, enterprise wireless (802.11xx), and converged courtroom audio-video and VoIP technologies. - Special projects: Assist with technical architecture for new or renovated court spaces, participate in special IT projects and perform other technical support duties as assigned. We should ensure no duplication. **Requirements** (Minimum Qualifications): - Minimum of three years of progressively responsible, specialized IT security experience, including at least two years equivalent to work at the CL 28 level. - Specialized experience: Progressively responsible experience that is in, or closely related to, the work of the position that has provided the particular knowledge, skills, and abilities to successfully perform the duties of the position. - Experience must demonstrate in-depth technical knowledge of systems analysis, network administration, cybersecurity operations and incident response. - Physical and operational requirements: Ability to lift a minimum of 50 pounds and physical mobility to access equipment in tight or elevated spaces (such as under desks and server racks). - Strong analytical troubleshooting and customer service skills are required. - Candidates must be available for occasional after-hours and weekend work, as well as periodic overnight travel. Note: The after-hours/weekend and travel could also go to Schedule, but we already have them in Requirements. Might be better to move to Schedule to avoid duplication. However the instruction says we should not duplicate content. We can keep them in Requirements or Schedule but not both. Since Schedule section is for schedule specifics, we could put after-hours/weekend and overnight travel there. Then Requirements would not include those. Let's decide: We'll put schedule info in Schedule section. Then Requirements will not have that. Thus Requirements bullets: - Minimum of three years of progressively responsible, specialized IT security experience, including at least two years equivalent to work at the CL 28 level. - Specialized experience: Progressively responsible experience that is in, or closely related to, the work of the position that has provided the particular knowledge, skills, and abilities to successfully perform the duties of the position. - Experience must demonstrate in-depth technical knowledge of systems analysis, network administration, cybersecurity operations and incident response. - Physical and operational requirements: Ability to lift a minimum of 50 pounds and physical mobility to access equipment in tight or elevated spaces (such as under desks and server racks). - Strong analytical troubleshooting and customer service skills are required. **Qualifications** (Preferred Qualifications): - Education: A bachelor’s degree from an accredited college or university in cybersecurity, information technology, computer science, computer engineering or a closely related field is strongly preferred. - Industry Certifications: Holding one or more active, industry-recognized security certifications is highly preferred, such as: - Certified Information Systems Security Professional (CISSP) - Certified Information Security Manager (CISM) - CompTIA Security+ or Cybersecurity Analyst (CySA+) - Certified Ethical Hacker (CEH) - GIAC Security Essentials (GSEC) or GIAC Certified Incident Handler (GCIH) - Certified Cloud Security Professional (CCSP) We could list as ul. **Skills** (Technical Expertise): - Scripting and automation: Strong practical proficiency in PowerShell, Python, Bash and SQL for automation, log analysis and system administration. - Cloud security and identity: Experience securing AWS, Azure, Microsoft 365, and Microsoft Entra ID environments, including least-privilege IAM/RBAC, privileged-access management, Conditional Access, cloud audit logging, and integration of CloudTrail, Azure Activity Logs, Entra ID sign-in and audit logs, and Microsoft 365 audit logs with SIEM platforms. - Operating Systems: Advanced knowledge in Windows client and Windows Server operating systems, Red Hat Enterprise Linux, MacOS, iOS. - Security and network tools: Proven experience with EDR and XDR platforms (such as Microsoft Defender for Endpoint, Qualys and CrowdStrike), SIEM tools (such as Splunk), packet analyzers (such as Wireshark), next-generation firewalls (such as Palo Alto and Cisco), VPN, Zero Trust network access, and IPSec. Vulnerability management and remediation using scanning tools like Tenable Nessus or Qualys. Network discovery tools and port scanners (such as Nmap). - Virtualization and infrastructure: Knowledge of VMware vSphere, virtual desktop infrastructure frameworks, Cisco core and access switching, enterprise Wi-Fi networks, storage area network environments, and secure data backup and disaster recovery utilities. - Environment: Experience operating within a federal court environment or working with specialized federal judiciary applications. **Schedule**: - Occasional after-hours and weekend work required. - Periodic overnight travel may be required. We should not include Benefits or Pay. Now we need to output HTML fragment with

  headings and

  • for lists,

    for prose. We need to decide which content is prose vs list. For About the role, we can use

    paragraphs. For Responsibilities, we can use

    • each duty area as a bullet, with the duty description inside the li (could include multiple sentences). For Requirements, Qualifications, Skills, Schedule we can use
      • . We must not include any extra text outside HTML. Let's craft.