Senior Security Engineer

Introduction

Looking for a rewarding career in the fast-paced technology industry? Look no further! The Department of Technology & Information (DTI) is Delaware’s central IT organization committed to providing technology services and collaborative solutions for Delaware while working to improve the lives of Delawareans through advanced technologies that innovate government services.� Employment with DTI is an opportunity to work in a collaborative environment that offers opportunities for professional development. DTI employees have the chance to work with 'best in class IT companies' offering our employees experience operating with some of the most talented in their field. In addition to recruiting and retaining the best and brightest, DTI acknowledges and values the diversity of our employees. DTI recognizes that fostering a diverse workforce provides remarkable benefits in terms of innovative thinking, increased collection of skills and experiences, greater teamwork, and higher morale. To learn more visit DTI’s Website at offers a robust hybrid work policy for employees whose job duties are conducive to working remotely.

Summary Statement

The principal responsibility is to provide highly effective security engineering support for DTI’s cloud environments, applications, and identity services. Services will be delivered efficiently, meet the needs of DTI and other state agencies, and comply with DTI policies and procedures. The position will work collaboratively with infrastructure, application development, security, and agency teams to design, implement, maintain, and troubleshoot security controls. The Senior Security Engineer is expected to be highly technical with a strong background across cloud, application, and identity security, including but not limited to: Cloud security platforms, services, and configuration management. Cloud identity and access management, privileged access, and secrets management. IAM administration and support, including single sign-on (SSO), multifactor authentication (MFA), application integrations, access policies, and user lifecycle management. Application and application programming interface (API) security. Application�security testing, secure code review, and vulnerability remediation. Secure architecture reviews and threat modeling. Security�automation, infrastructure as code, and integration of security controls into development and deployment pipelines. Troubleshooting�cloud, application, and identity security issues in collaboration with technical teams and vendors.

Preferred Qualification

Applicants who do not possess the preferred qualification will still be eligible to compete for this position if job requirements are met. Possess a bachelor’s degree in information technology, computer science, cybersecurity, or a related field. Possess a certification in cloud cybersecurity, application security, or identity and access management relevant to the assigned services. Possess�experience integrating applications with Okta using SAML, OpenID Connect (OIDC), OAuth 2.0, or SCIM. Possess experience securing cloud-native applications, containers, serverless services, or software supply chains. Possess�experience applying NIST security frameworks, CIS Benchmarks, or OWASP application security guidance.

Job Requirements

Job Requirements for Senior Security Engineer� Please attach a resume with your online application or use the resume tab in DEL to provide a detailed description of how your education, training and/or experience meets each job requirement including employer, experience/responsibilities and dates (month/year} of employment/training.� Possess�a minimum of 5 years of hands-on experience in an enterprise IT environment, including cybersecurity, infrastructure engineering, or software development. Possess�a minimum of 3 years of technical engineering experience in cloud security and/or application security, including hands-on experience in both areas. Possess�experience implementing and supporting security controls in at least one major cloud platform, such as Microsoft Azure, Amazon Web Services (AWS), or Google Cloud. Possess�experience identifying, validating, and remediating application or API vulnerabilities through security testing, secure code review, or threat modeling. Possess�experience implementing identity and access controls, secure configurations, and protections for sensitive data across cloud environments and applications. Possess�experience using scripting, infrastructure as code, or development and deployment pipelines to automate security controls or security testing.

Additional Posting Information

This position may be eligible for a hybrid schedule, with a minimum of two days per week in the office. More information will be shared at the time of interview.

Conditions of Hire

Criminal background check: A satisfactory fingerprint based criminal background check administered by the Delaware State Police is required as a Condition of Hire. All applicants must be legally authorized to work in the United States. DTI participates in the Federal E-Verify system where we will provide the federal government with each Executive Branch new hires Form I-9 information to confirm that you are authorized to work in the U.S.� For more information refer to our Job Seeker Resources web page. DTI does not provide employment-based sponsorship.

Benefits

DTI’s Benefits to include: Group Health Plan, Dental Plan, Vision Plan, Prescription, Flexible Spending (Health and Dependent Care), Long & Short Term�Disability Insurance, Group Universal Life Insurance, Accident & Critical Illness Insurance, Health Management Programs. 21 paid vacation days, 15 paid sick days, 13 paid holidays, Up to 12 weeks paid Parental Leave. Tuition reimbursement up to $4,000 annually. State funded learning opportunities, mentor programs and professional development opportunities. Employee Assistance Program: Access to support services such as Professional Counseling Services, Legal Services, Financial Services. Employer & Employee Funded Pension Plan as well as an Employee Funded Retirement Savings Plan available. � To learn more about the comprehensive benefit package please visit our website at�

Selection Process

The application and supplemental questionnaire are evaluated based upon a rating of your education, training and experience as they relate to the job requirements of the position.� It is essential that you provide complete and accurate information on your application and the supplemental questionnaire to include dates of employment, job title and job duties.� For education and training, list name of educational provider, training course titles and summary of course content.�� Narrative information supplied in response to the questions must be supported by the information supplied on the application including your employment, education and training history as it relates to the job requirements. Once you have submitted your application on-line, all future correspondence related to your application will be sent via email.� Please keep your contact information current.� You may also view all correspondence sent to you by the State of Delaware in the “My Applications” tab at�StateJobs.Delaware.gov.

Accommodations

Selection Plan

Ongoing Application Review