Senior Cybersecurity Administrator 26-E-08

Summary Of Duties And Responsibilities

Under the direction of the Chief Information Security Officer, the Senior Cybersecurity Administrator will serve as a senior technical resource responsible for administering, securing, and maintaining the Office’s on-premises and cloud-hosted cybersecurity infrastructure. This position will provide advanced technical leadership for enterprise cybersecurity services, including server environments, identity and access management, endpoint detection and response, vulnerability management, and other security technologies.

• Design, build, configure, secure, and maintain virtual servers and related infrastructure in support of cybersecurity operations and administration.
• Assist with capacity planning, system hardening, baseline configuration, lifecycle management, backup coordination, server decommissioning, and documentation of server builds, configurations, and administrative procedures.
• Support enterprise vulnerability and patch management by evaluating, testing, deploying, tracking, and reporting on operating systems, applications, and security patches, and coordinating remediation across servers, workstations, and related infrastructure.
• Manage and support information security tools and technologies; develop and standardize management reporting; and lead the implementation, integration, customization, and administration of identity and access management tools such as Okta, Duo, CyberArk, Azure Active Directory, and related platforms.
• Oversee role-based access systems to ensure least privilege access throughout the enterprise and work closely with business and technology leaders to deploy and maintain network micro-segmentation, endpoint protection, access controls, and other security architecture improvements.
• Deploy, update, maintain, and troubleshoot leading endpoint detection and response technologies; assist with vulnerability and threat management operations; and prepare technical and executive-level metrics related to vulnerabilities, patch compliance, system health, and security risk.
• Review and implement privilege access requests, changes to Active Directory Group Policies, Access Control Lists, and Directory Services; identify unusual patterns of activity; and provide senior-level technical support to cybersecurity compliance and operations functions.
• Perform periodic reviews of credential utilization and entitlements across the enterprise; maintain digital certificates and domain registry services; respond to, investigate, and remediating security incidents as part of the incident response team; and recommend improvements to administrative and security processes.
• Aid with onboarding and offboarding processes to ensure least privilege access; train and develop junior and mid-level technical staff; develop and maintain technical documentation, standards, and procedures; and support continuous improvement of the Office’s cybersecurity program.

Qualifications

• Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or related field from an accredited college or university, or any equivalent combination of education and related experience.
• Minimum of seven years of hands-on experience configuring, supporting, securing, and administering enterprise servers and cybersecurity environments, or any equivalent combination of education and related experience.
• Experience with endpoint detection and response tools such as Cylance, Carbon Black, CrowdStrike, or similar products; email security tools such as Mimecast, Microsoft Defender for Office 365, Proofpoint, or similar platforms; vulnerability management tools such as Rapid7, Qualys, Tenable, or similar solutions; IT scripting tools such as Python, PowerShell, or similar languages; Group Policy; and IT automation and configuration tools is highly preferred.
• At least one certification such as Security+, Network+, CCNA, CCNP, PCNSE, CISSP, or a comparable cybersecurity, networking, systems administration, or cloud security certification is required.
• The position requires the ability to effectively coordinate, prioritize, troubleshoot, document, and collaborate across technical and non-technical teams.
• Outstanding written and verbal communication skills are required.
• Attendance and the ability to maintain satisfactory working relationships with OAG employees and the general public are required.

Benefits

• Complete benefits package including health care, dental, vision, retirement, deferred compensation plans, flexible spending accounts, life insurance, long-term disability, holidays, vacation, and sick leave.
• Part-time employees who work an average of 20 hours per week over the course of a year, receive benefits on a pro-rated basis.
• Access to many great benefits including health and dental insurance, free Vision insurance, pension benefits through the State Employees' Retirement System, deferred compensation, commuter savings program, flexible spending, life insurance, disability coverage, employee assistance program, holidays, vacation, and sick leave.
• Attorneys receive office-provided continuing legal education.