Job Description and Duties

Under the administrative direction of the Chief Information Security Office (CISO), Career Executive Appointment (CEA) of the Caltrans Security Services Division, the incumbent serves as a prime technical security architect within the Security Services Division. This includes, but is not limited to, the network security operations, technology and cloud architecture security design and services.

The incumbent will work to create and develop enterprise security standards to properly secure the enterprise network and cloud services architectures by providing direction and recommendations to effectively respond and adapt to the increasing organizational business and technical requirements and needs.

Major Functions

The incumbent provides leadership and expertise for the security architecture for the enterprise network and cloud technology, including developing and overseeing the technical design and support for the California Integrated Travel Project (Cal-ITP) system and other Caltrans security systems, including the proper operation and configuration of firewalls, Intrusion Prevention Systems (IPS’s), URL filtering systems, remote access, and highly technical security operational monitoring and logging equipment. The incumbent conducts research and provides input on strategic design decisions, serving as lead security architect for the design, implementation, and deployment of the network, applications, system resources, network access control solutions (NAC), operational technology (OT), and Internet of Things (IoT). The incumbent will work closely with the California Integrated Mobility Program (CIM), Traffic Operations, Transportation Management Centers (TMCs) to increase the security controls and security posture. The incumbent also oversees the operational and maintenance duties related to all security infrastructure resources.

The incumbent works both independently and/or collaboratively as the senior technical architect in a team on security issues and helping guide other Information Technology (IT) professionals to properly and effectively secure systems, network and application design and integration.

The incumbent provides expert guidance to improve Caltrans’ security posture and investigate security events; assists in the remediation of identified risks and vulnerabilities to ensure the confidentiality, integrity and availability of the organizations sensitive data and associated data security standards as defined by the Payment Card Industry Data Security Standards (PCI DSS) and other relevant data privacy and disclosure compliance requirements.

Domain: Information Security Engineering