The Position Job Appointment: Regular, Full-time Work Schedule:Monday through Friday, 8 am-5 pm, with occasional after-hours work required as needed for critical security incidents or urgent system maintenance. Work Location:This position has an exception to work primarily remotely. However, there will be instances when it is necessary to come onsite for work (with as much advance notice as possible). Remote work must be performed within Oregon or Washington. Benefits:Please check our benefits tab for an overview of the benefits for this position. Union Representation:This position is represented by Professional Technical Employees, Local 17 (PROTEC17). To view this labor agreement, please clickhere. Application Material:Please click APPLY to submit your application via the City of Portland's online portal. You must attach a cover letter and resume. About the Position: The Bureau of Technology Services (BTS) is seeking to fill the position of Information Security Architect to work on the Information Security team. The Information Security Architect is responsible for researching, analyzing, and documenting assigned cybersecurity topics and providing recommendations to management for solutions, enhancements, and risk mitigations. Incumbents develop access and audit controls, contribute to security strategies, and incorporate industry standards and best practices in support of the City's information security architecture and compliance programs. Information Security Architects provide the City with technical cybersecurity expertise for information governance, risk, compliance, technology service resiliency, and cyber incident response. The successful candidate will be able to effectively and efficiently work in a culturally and gender diverse workplace. The Team: The role of the Information Security team is to ensure the confidentiality, integrity, and availability of all City data and communications systems and assets. The responsibilities of this program are to develop and measure compliance with information policies and procedures; to minimize risk through implementation of effective technical, administrative, and physical security controls; and to develop and maintain the BTS business continuity and disaster recovery plan. Information Security supports the city's goal to deliver efficient, effective, and accountable municipal services, as well as the City Operations Service area's goal to maximize the cost-effective use of technology by employing appropriate safeguards required to properly protect the City's information assets. Performance is measured by the effectiveness of the Information Security program in protecting the City's technology environment from cybersecurity threats. As an Information Security Architect, you will: * Develop and implement security architecture, access controls, and audit mechanisms. * Analyze cybersecurity risks, threats, and incidents to guide mitigation strategies. * Provide expert guidance on information security governance, compliance, and risk management. * Research emerging security trends, tools, and frameworks to enhance the City's cyber defenses. * Support incident response efforts, including after-hours participation as needed. * Implement and maintain security controls aligned with industry standards (e.g., NIST, CIS). The successful candidate must have the ability to pass a comprehensive police background investigation and be able to work in a culturally and gender-diverse workplace. Questions? Amanda Hillebrecht, Senior Recruiter Bureau of Human Resources [email protected] To Qualify The following minimum qualifications arerequiredfor this position: * Advanced experience and industry certifications directly related to information technology and cybersecurity skills, such as CISSP, SSCP, GIAC (GX-FA, GX-FE, GX-CS), CISA, Certified Ethical Hacker (CEH), and Certificate of Cloud Security Knowledge (CCSK). * Advanced experience applying cybersecurity principles, including Zero Trust Architecture, security policies and control frameworks, incident response, risk assessments, business continuity planning, and the Software/Systems Development Lifecycle (SDLC). * Advanced experience in support of information technology systems, applications and services. Demonstrated knowledge and skills with several information security capabilities: web application security (Kubernetes, docker; MS Azure cloud, Google Cloud Platform, Amazon Web Services (AWS)), Identity Access Management (IAM - MS/AD, LDAP), endpoint detection and response (EDR), Microsoft Purview, firewalls (Fortinet), IDS/IPS, SIEM platforms, vulnerability management platforms (Tenable, Elastic), penetration testing and API security. Applied knowledge and experience with one or more operating systems and coding, such as Unix/Linux, VMWare ESX, or Microsoft Hyper-V, Microsoft Power BI, and python. Applied knowledge may be assessed. * Advanced experience with cybersecurity investigations, research, analysis, mitigations, incident response, and technical project management. * Advanced and demonstrated knowledge of information security standards (NIST, CIS, MITRE ATT&CK, OWASP) and compliance domains (PCI-DSS, HIPAA, Cloud Security Alliance). * Advanced experienceand effective communication skills, with the ability to influence others, maintain strong working relationships, and create clear, concise documentation for policies, procedures, and guidelines for non-technical audiences. Applicants must also: * Have the ability to pass an in-depth background investigation. * Be able to work non-business hours during cybersecurity incident responses. * Have the ability to work independently and manage multiple, concurrent tasks, assignments, and responsibilities. The Recruitment Process STEP 1: Apply online betweenMay 19, 2025 and June 2, 2025 Required Application Materials: * Resume * Cover Letter * Details are key! The City uses a merit-based system, so your cover letter should be thorough and specifically address each qualification listed in the "To Qualify" section of the job announcement. Your cover letter can exceed one page to ensure you are able to provide detailed information for every qualification. Follow the instructions, as a subject matter expert will be evaluating your details to confirm that you meet the minimum requirements. * Answer to three (3) Supplemental Questions (click on the Questions tab to preview the questions) Optional Application Materials: * Veteran documents to request for Veteran Preference (ex, DD214-Member 4, VA Benefit Letter, etc.) Application Tips: * The City of Portland hasHow to Apply Videosand offersHow to ApplyClassestwiceper month. If you have questions after watching the videos, you are invited to contact the recruiter listed on the announcement. * Your cover letter should include details describing your education, training, and/or experience, and where obtained, which clearly reflect your qualifications for each of the numbered items in the "To Qualify" section of this announcement. * Your resume should support the details described in your cover letter. * How We DeterminePay: The City of Portland is covered by the Oregon EqualPayAct. Your salary is determined based on the experience listed in your resume that is directly related and equivalent to the position for which you are applying. It is strongly encouraged to include any transferable experience (paid or unpaid, regardless of how recent) to ensure your offer is reflective of all your relevant experience. * Do not attach materials not requested. * All completed applications for this position must be submitted no later than the closing date and time of this recruitment. * All applications must be submitted via the City's online application process. E-mailed and/or faxed applications will not be accepted. * You can use AI tools to assist with your job application, but please make sure to personalize your responses to supplemental questions. Avoid copying and pasting; instead, use AI to generate ideas and then tailor them to reflect your own experiences and skills. Step 2: Minimum Qualification Evaluation:Week of June 2, 2025 * An evaluation of each applicant's training and paid and unpaid experience, as demonstrated in their resume and cover letter, is weighted 100%. * Your resume and cover letter will be the basis for our evaluation of your qualifications for this position. Incomplete or inappropriate information may result in disqualification. * You have 14 days from the notice of the minimum qualification evaluation results to let us know if you would like to review and discuss your evaluation results. Please read theCity of Portland Administrative Rule 3.01for complete information. * Additional evaluation may be required before the establishment of the eligible list and/or final selection. Step 3: Establishment of Eligible List:Week of June 9, 2025 * Candidates who meet the minimum qualifications will be placed on the equally ranked eligible list. Step 4: Selection (Interview):June * The hiring bureau will review and select candidates to interview. Step 5: Offer of Employment:June Step 6: Start Date:July * A start date will be determined after all conditions of employment have been met. * Timeline is approximate and subject to change* Additional Information Click herefor additional information regarding the following: * Veteran Preference * ADA, Pregnancy, and Religious Accommodations * Work Status * Equal Employment Opportunity