IT & Security Engineer
for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections if posting has real specific content. We must not repeat job title. Must not include Job ID etc. Must preserve all substantive info, remove boilerplate like EEO, etc. Must not invent or summarize away detail. Must not include sections with filler like "commensurate with experience". Must include Pay and Schedule only if posting actually states them. The posting includes Compensation: $36.00-$43.00/hourly, Schedule: Monday-Friday, 20-30 hours per week, 9:00 AM-5:00 PM, Work Arrangement: Hybrid (2 days onsite preferred). So we have Pay and Schedule sections. Also Benefits? Not mentioned. So we should not include Benefits unless present. Also maybe "About the role" can be derived from first paragraph. We'll include About the role as a section with prose summarizing the role description (but must preserve all substantive info, not invent). We can include the description as prose. Must not omit details. We'll need to capture all responsibilities, qualifications, etc. Use - for any list of duties/requirements/benefits. So we need to break responsibilities into list items. Similarly qualifications into list. Must preserve all details.
We need to decide sections: About the role (maybe a brief paragraph). Responsibilities (list). Requirements (maybe Must-Have Qualifications). Qualifications (maybe Preferred Qualifications). Skills? Could combine but we can have Skills section if there is specific skill list. The posting includes "Must-Have Qualifications" list and "Preferred Qualifications". Could map Must-Have to Requirements, Preferred to Qualifications. Also there is "Ideal Candidate Profile" paragraph which could be part of About the role or separate. We'll include About the role covering the initial description and ideal candidate profile. Then Responsibilities (list from Key Responsibilities). Then Requirements (list from Must-Have Qualifications). Then Qualifications (list from Preferred Qualifications). Then Pay (section with compensation). Then Schedule (section with schedule and work arrangement). Ensure we don't include filler.
We must not repeat job title. Must not include navigation etc. Must output only HTML fragment.
Let's extract details.
About the role: The posting starts: "Ultimate Staffing is partnering with an innovative technology organization seeking an experienced IT & Security Engineer to support and strengthen its global IT infrastructure and cybersecurity operations. This role is approximately 80% security-focused and 20% IT operations, making it an ideal opportunity for a hands-on engineer who excels in security governance, cloud security, compliance, vulnerability management, and enterprise IT administration. The successful candidate will serve as a key stakeholder responsible for maintaining secure systems, enforcing security controls, supporting compliance initiatives, and ensuring a reliable technology environment across a distributed workforce.Candidates with expertise in Cloudflare, compliance/audit programs, and asset management are strongly encouraged to apply. Experience supporting mobile environments is a plus. Location: Salt Lake City, UT (Preferred), San Francisco Bay Area, CA, or Remote Schedule: Monday-Friday, 20-30 hours per week, 9:00 AM-5:00 PM Work Arrangement: Hybrid (2 days onsite preferred) Compensation: $36.00-$43.00/hourly Position Type: Temp-to-Hire Ideal Candidate Profile The ideal candidate is a highly autonomous IT and Security professional with strong experience in security operations, cloud security, compliance, identity management, and enterprise infrastructure. They are comfortable balancing strategic security initiatives with hands-on technical administration and can independently lead projects, resolve complex issues, and collaborate effectively across multiple business functions. Experience with Cloudflare, audit preparation, asset management, and modern security frameworks is essential for success in this role"
We need to preserve all substantive info. We'll include location, schedule, compensation, position type maybe in About the role? But we have separate Pay and Schedule sections. Might be redundant but we can still include location and position type in About the role. The instructions: "Do NOT repeat the job title as a heading (the page already shows it) and do NOT put Job ID / requisition numbers as headings — fold minor metadata into a short
or drop it." So location, schedule, compensation are not minor metadata? They are specific; we have dedicated sections for Pay and Schedule. Could still include them in About the role but that would duplicate. Better to put them in dedicated sections and not repeat in About the role. However About the role should still contain the description of role, not necessarily location etc. We'll keep About the role focusing on role description and ideal candidate profile, excluding location, schedule, compensation, position type (since those go to Pay/Schedule). But we must preserve all substantive info; we will put location, schedule, compensation, position type in appropriate sections.
Thus About the role paragraph: combine first sentences up to "Experience supporting mobile environments is a plus." plus Ideal Candidate Profile paragraph. Let's craft:
"Ultimate Staffing is partnering with an innovative technology organization seeking an experienced IT & Security Engineer to support and strengthen its global IT infrastructure and cybersecurity operations. This role is approximately 80% security-focused and 20% IT operations, making it an ideal opportunity for a hands-on engineer who excels in security governance, cloud security, compliance, vulnerability management, and enterprise IT administration. The successful candidate will serve as a key stakeholder responsible for maintaining secure systems, enforcing security controls, supporting compliance initiatives, and ensuring a reliable technology environment across a distributed workforce. Candidates with expertise in Cloudflare, compliance/audit programs, and asset management are strongly encouraged to apply. Experience supporting mobile environments is a plus. The ideal candidate is a highly autonomous IT and Security professional with strong experience in security operations, cloud security, compliance, identity management, and enterprise infrastructure. They are comfortable balancing strategic security initiatives with hands-on technical administration and can independently lead projects, resolve complex issues, and collaborate effectively across multiple business functions. Experience with Cloudflare, audit preparation, asset management, and modern security frameworks is essential for success in this role."
That preserves all.
Now Responsibilities: list from Key Responsibilities. Let's extract each bullet:
- Lead and maintain the organization's security posture in alignment with ISO 27001 and NIST CSF 2.0.
- Manage vulnerability assessments, remediation tracking, and security incident response activities.
- Administer security monitoring tools, HIDS/SIEM platforms, and secrets management solutions.
- Conduct security awareness initiatives, phishing simulations, and end-user training.
- Manage vulnerability disclosure and bug bounty programs.
- Secure and administer Google Cloud Platform (GCP) environments, including IAM, logging, and security policies.
- Manage Cloudflare security technologies, including: Web Application Firewall (WAF), Zero Trust Access, DNS Security, API Protection.
- Perform cloud and network security assessments and recommend improvements.
- Support Kubernetes security through RBAC, workload reviews, and container hardening best practices.
- Administer Okta and enterprise identity management solutions.
- Manage Single Sign-On (SSO), Multi-Factor Authentication (MFA), and automated provisioning.
- Enforce least-privilege access controls and access lifecycle management.
- Support onboarding, offboarding, and role-based access reviews.
- Manage the lifecycle of hardware and software across Windows, macOS, and Linux environments.
- Oversee VPNs, endpoint security, disaster recovery, backups, and MDM platforms.
- Provide advanced technical support and act as the escalation point for complex IT issues.
- Develop and maintain system documentation, standards, and operational procedures.
- Own the organization's hardware, software, and license inventory.
- Track assets from procurement through deployment, reassignment, and secure disposal.
- Maintain accurate inventory records for budgeting, compliance, and audit purposes.
- Support license audits and technology refresh planning.
- Coordinate all IT aspects of employee onboarding and offboarding.
- Provision systems, devices, and access permissions for new hires.
- Ensure complete and timely deprovisioning upon employee separation.
- Maintain documented and auditable processes for user lifecycle management.
- Administer Google Workspace, Atlassian/Jira, and other critical SaaS platforms.
- Manage vendor relationships, renewals, licensing, and procurement activities.
- Ensure platform configurations adhere to organizational security standards.
- Lead IT and security projects from planning through implementation.
- Partner with Engineering, HR, Finance, Compliance, and Operations teams.
- Support audit readiness, risk assessments, and security reviews.
- Drive continuous improvement initiatives across IT and security functions.
We'll put each as
- .
Now Requirements (Must-Have Qualifications):
- Cloudflare administration and web security expertise
- Compliance and audit experience, including ISO 27001 and NIST frameworks
- IT asset management experience
- 5+ years of IT Systems Administration and/or Security Engineering experience
- Experience working across Windows, Linux, and macOS environments
- Strong understanding of identity and access management principles
- Excellent communication and documentation skills
Now Qualifications (Preferred Qualifications):
- CISSP, CompTIA Security+, Google Professional Cloud Security Engineer, or similar certifications
- Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field
- Experience with mobile security platforms and mobile device management solutions
- Experience in fast-paced technology or SaaS environments
- Scripting experience with Python or Bash
Now Pay: Compensation: $36.00-$43.00/hourly. Also Position Type: Temp-to-Hire maybe include in Pay? Could be separate but we only have Pay section. We'll include both compensation and position type.
Schedule: Schedule: Monday-Friday, 20-30 hours per week, 9:00 AM-5:00 PM Work Arrangement: Hybrid (2 days onsite preferred). Also Location: Salt Lake City, UT (Preferred), San Francisco Bay Area, CA, or Remote. Should location go under Schedule? Might be better to have a separate "Location" section but not in allowed headings list. The allowed headings are About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Location not listed; we could fold location into Schedule section as minor metadata? The instruction: "fold minor metadata into a short
or drop it." Location could be considered minor metadata; we could include it in a short
within About the role or Schedule. But we already have About the role without location. Perhaps we add a short
after About the role for location? But that would be a separate paragraph not under a heading; allowed? The instruction says output ONLY the HTML fragment; we can have
elements anywhere. So we can add a
for location after About the role before Responsibilities. That would preserve location info without creating a heading. Similarly position type maybe we already included in Pay. We'll include location as a
.
Thus final HTML:
About the role
... (the paragraph)
Location: Salt Lake City, UT (Preferred), San Francisco Bay Area, CA, or Remote
Responsibilities
...
Requirements
...
Qualifications
...
Pay
Compensation: $36.00-$43.00/hourly; Position Type: Temp-to-Hire
Schedule
Schedule: Monday-Friday, 20-30 hours per week, 9:00 AM-5:00 PM; Work Arrangement: Hybrid (2 days onsite preferred)
Check that we didn't include Benefits or Skills sections (none). Good.
Now ensure we didn't miss any substantive info: The "Ideal Candidate Profile" paragraph we included. The "Experience supporting mobile environments is a plus." included. The "Candidates with expertise in Cloudflare, compliance/audit programs, and asset management are strongly encouraged to apply." included. The "Experience with Cloudflare, audit preparation,
or drop it." So location, schedule, compensation are not minor metadata? They are specific; we have dedicated sections for Pay and Schedule. Could still include them in About the role but that would duplicate. Better to put them in dedicated sections and not repeat in About the role. However About the role should still contain the description of role, not necessarily location etc. We'll keep About the role focusing on role description and ideal candidate profile, excluding location, schedule, compensation, position type (since those go to Pay/Schedule). But we must preserve all substantive info; we will put location, schedule, compensation, position type in appropriate sections. Thus About the role paragraph: combine first sentences up to "Experience supporting mobile environments is a plus." plus Ideal Candidate Profile paragraph. Let's craft: "Ultimate Staffing is partnering with an innovative technology organization seeking an experienced IT & Security Engineer to support and strengthen its global IT infrastructure and cybersecurity operations. This role is approximately 80% security-focused and 20% IT operations, making it an ideal opportunity for a hands-on engineer who excels in security governance, cloud security, compliance, vulnerability management, and enterprise IT administration. The successful candidate will serve as a key stakeholder responsible for maintaining secure systems, enforcing security controls, supporting compliance initiatives, and ensuring a reliable technology environment across a distributed workforce. Candidates with expertise in Cloudflare, compliance/audit programs, and asset management are strongly encouraged to apply. Experience supporting mobile environments is a plus. The ideal candidate is a highly autonomous IT and Security professional with strong experience in security operations, cloud security, compliance, identity management, and enterprise infrastructure. They are comfortable balancing strategic security initiatives with hands-on technical administration and can independently lead projects, resolve complex issues, and collaborate effectively across multiple business functions. Experience with Cloudflare, audit preparation, asset management, and modern security frameworks is essential for success in this role." That preserves all. Now Responsibilities: list from Key Responsibilities. Let's extract each bullet: - Lead and maintain the organization's security posture in alignment with ISO 27001 and NIST CSF 2.0. - Manage vulnerability assessments, remediation tracking, and security incident response activities. - Administer security monitoring tools, HIDS/SIEM platforms, and secrets management solutions. - Conduct security awareness initiatives, phishing simulations, and end-user training. - Manage vulnerability disclosure and bug bounty programs. - Secure and administer Google Cloud Platform (GCP) environments, including IAM, logging, and security policies. - Manage Cloudflare security technologies, including: Web Application Firewall (WAF), Zero Trust Access, DNS Security, API Protection. - Perform cloud and network security assessments and recommend improvements. - Support Kubernetes security through RBAC, workload reviews, and container hardening best practices. - Administer Okta and enterprise identity management solutions. - Manage Single Sign-On (SSO), Multi-Factor Authentication (MFA), and automated provisioning. - Enforce least-privilege access controls and access lifecycle management. - Support onboarding, offboarding, and role-based access reviews. - Manage the lifecycle of hardware and software across Windows, macOS, and Linux environments. - Oversee VPNs, endpoint security, disaster recovery, backups, and MDM platforms. - Provide advanced technical support and act as the escalation point for complex IT issues. - Develop and maintain system documentation, standards, and operational procedures. - Own the organization's hardware, software, and license inventory. - Track assets from procurement through deployment, reassignment, and secure disposal. - Maintain accurate inventory records for budgeting, compliance, and audit purposes. - Support license audits and technology refresh planning. - Coordinate all IT aspects of employee onboarding and offboarding. - Provision systems, devices, and access permissions for new hires. - Ensure complete and timely deprovisioning upon employee separation. - Maintain documented and auditable processes for user lifecycle management. - Administer Google Workspace, Atlassian/Jira, and other critical SaaS platforms. - Manage vendor relationships, renewals, licensing, and procurement activities. - Ensure platform configurations adhere to organizational security standards. - Lead IT and security projects from planning through implementation. - Partner with Engineering, HR, Finance, Compliance, and Operations teams. - Support audit readiness, risk assessments, and security reviews. - Drive continuous improvement initiatives across IT and security functions. We'll put each as
or drop it." Location could be considered minor metadata; we could include it in a short
within About the role or Schedule. But we already have About the role without location. Perhaps we add a short
after About the role for location? But that would be a separate paragraph not under a heading; allowed? The instruction says output ONLY the HTML fragment; we can have
elements anywhere. So we can add a
for location after About the role before Responsibilities. That would preserve location info without creating a heading. Similarly position type maybe we already included in Pay. We'll include location as a
. Thus final HTML:
About the role
... (the paragraph)
Location: Salt Lake City, UT (Preferred), San Francisco Bay Area, CA, or Remote
Responsibilities
- ...
Requirements
- ...
Qualifications
- ...
Pay
Compensation: $36.00-$43.00/hourly; Position Type: Temp-to-Hire
Schedule
Schedule: Monday-Friday, 20-30 hours per week, 9:00 AM-5:00 PM; Work Arrangement: Hybrid (2 days onsite preferred)
Check that we didn't include Benefits or Skills sections (none). Good. Now ensure we didn't miss any substantive info: The "Ideal Candidate Profile" paragraph we included. The "Experience supporting mobile environments is a plus." included. The "Candidates with expertise in Cloudflare, compliance/audit programs, and asset management are strongly encouraged to apply." included. The "Experience with Cloudflare, audit preparation,