IT Lead Security Engineer (Lead Infrastructure Security Engineer)

This position may be eligible for a telework opportunity in accordance with departmental policies and operational needs. Employees are currently required to work in-person at least four (4) days per week in alignment with Executive Order N-22-25. Additional in-office days may be required based on operational needs.

• The office is located at 1810 16th Street, Sacramento
• All employees (including OPT students) must provide valid work authorization per Form I-9.
• Please note, CalHR does not provide sponsorship and is not an E-Verified employer.

Why join CalHR?

The California Department of Human Resources (CalHR) is the pillar of human resources management for all state employees. Our success is made possible by the hard work of more than 400 CalHR team members who serve as trusted advisors to our strategic partners and the public. If you are interested in providing exceptional human resource services and guidance, CalHR is the place for you. By joining our team, you’ll have the opportunity to make a meaningful impact while working alongside passionate professionals. Get to know us more here!

About This Role

Under the general direction of the Information Technology Manager I, Department of Human Resources (CalHR), Infrastructure Unit, the Information Technology Specialist II serves as a senior technical resource responsible for designing, implementing, securing, and maintaining enterprise infrastructure supporting CalHR's business operations. The incumbent provides advanced technical expertise across cloud environments, servers, storage, networking, directory services, and infrastructure security.

You will find additional information about the job in the Duty Statement.

Minimum Requirements

You will find the Minimum Requirements in the Class Specification.

• INFORMATION TECHNOLOGY SPECIALIST II

Classification:

INFORMATION TECHNOLOGY SPECIALIST II

$8,881.00 - $11,905.00 L/month

• New to State candidates will be hired into the minimum salary of the classification or minimum of alternate range when applicable.

Special Requirements

All interested applicants are required to submit a Statement of Qualifications (SOQ). Please provide direct responses to each of the numbered items listed below. Applicants must number and include the full text of the SOQ items in their response. Please include specific examples of your education, training, and/or experience. SOQs should be limited to a maximum of two (2) pages, single-spaced, twelve-point Arial font.

• Describe your hands-on experience designing, implementing, and hardening complex server infrastructure across hybrid environments (e.g., Windows Server, Linux, VMware, and Microsoft Azure.)
• Please detail your technical expertise in managing enterprise storage solutions alongside core server applications (e.g., Active Directory, IIS, Citrix XenApp, or Exchange.)
• Describe your experience configuring, securing, and maintaining enterprise network infrastructure (e.g., Palo Alto Firewalls, Cisco switching, wireless controllers, or Network Access Control/Forescout.) Additionally, share how you provide technical leadership and mentorship.

Note: Applicants who do not follow these instructions may be disqualified from the selection process. Cover letters and resumes do not take the place of the SOQ.

Required Application Package Documents

The Following Items Are Required To Be Submitted With Your Application. Applicants Who Do Not Submit The Required Items Timely May Not Be Considered For This Job:

• Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at www.CalCareers.ca.gov. All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position.
• Resume is required and must be included.
• A Statement of Qualifications (SOQ) is required and must be included. Please see the Special Requirements section for instructions.

Applicants requiring reasonable accommodations for the hiring interview process must request the necessary accommodations if scheduled for a hiring interview. The request should be made at the time of contact to schedule the interview. Questions regarding reasonable accommodations may be directed to the EEO contact listed on this job posting.

Desirable Qualifications

In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:

• Cloud Security Expertise: Advanced, hands-on experience designing, securing, and managing Microsoft Azure environments, with specific expertise in Cloud Security Posture Management (CSPM), Microsoft Defender for Cloud, Microsoft Sentinel, and Identity and Access Management (IAM/Entra ID)
• Enterprise Infrastructure & Operating Systems: Deep technical knowledge and experience configuring, hardening, and maintaining enterprise-level Windows Server (2016+), Linux, and VMware virtualization environments
• Network & Perimeter Security: Proficiency with configuring, optimizing, and troubleshooting Palo Alto Firewalls, Cisco switches, and Network Access Control (NAC) systems like ForeScout
• Storage Area Networks (SAN): Experience engineering and managing enterprise storage arrays, optimizing Fibre Channel protocols, and implementing storage encryption and data retention policies
• Automation & Orchestration: Strong experience developing advanced automation scripts (e.g., PowerShell, Bash, or Infrastructure as Code) to streamline deployments, patching, and security audits
• Analytical & Problem-Solving Skills: Excellent analytical, critical thinking, and troubleshooting skills, with the ability to resolve complex, high-priority technical issues under pressure
• Professional Dependability & Communication: Exceptional written and verbal communication skills, a strong sense of accountability, and the ability to build collaborative relationships with teammates, stakeholders, and control agencies
• Lead & Mentorship Experience: Demonstrated experience serving as a technical lead, steering complex IT projects, establishing technical standards, and mentoring junior systems engineers and technical staff
• Industry Certifications (Highly Desired): Possession of relevant industry-recognized certifications, such as:
• Certified Information Systems Security Professional (CISSP)
• Certified Cloud Security Professional (CCSP)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Palo Alto Networks Certified Network Security Engineer (PCNSE)

Steps for how to apply before midnight, August 13th = (Please email CalHR's recruiters when you have applied, [email protected])

- For more details of the job responsibilities (Duty Statement,) the minimum requirements, comp/benefits, and more click on the job posting link: https://calcareers.ca.gov/CalHrPublic/Jobs/JobPosting.aspx?JobControlId=526674

- You will need to take the Information Technology Specialist II exam if you have not already --> These questions relate to your experience and are used to determine the appropriate job classification based on your background/experience.

• https://calcareers.ca.gov/CalHrPublic/Exams/ExamBulletin.aspx?ExamControlId=4796

PLEASE view the details of the “Examination Information” AND the “Training and Experience Examination Preview” in the exam link. This information will help you with the exam.

• Click 'Apply' --> Login or create a CalCareers account if you do not have one already. Then click 'Continue' for the exam.
• The Limited Examination and Appointment Program (LEAP) is an optional pathway to state civil service for people with disabilities. Visit the CalHR LEAP page for additional information.

- Once you have taken the exam, go back to the job posting if you are not guided there: https://calcareers.ca.gov/CalHrPublic/Jobs/JobPosting.aspx?JobControlId=526674 and click Apply --> "I have eligibility' and complete your application. Make sure your application (not your resume) shows how your experiences aligns with the duty statement and meets the minimum qualifications.

• Attach your resume and responses to the Statement of Qualifications. See the "Special Requirements" section for details on the Statement of Qualifications.

--> Not attaching your resume and response to the Statement of Qualifications questions on your application on CalCareers will prevent you from moving forward in the hiring process.

A couple tips to share for the exam and Statement of Qualifications:

- The Statement of Qualifications are like interview questions that you answer in writing. We do recommend using word.doc for your responses and keep to the requirements if it says two pages for example and the specific font of Arial 12 font. Take your time to think about your response in answering the questions. Also check spelling. Please do look at the duty statement from the job posting and match to your experience to answer the questions. Here is a link to more tips: https://www.calhr.ca.gov/Documents/FINAL%20-%20Candidate%20SOQ%20Guidance%201.pdf

- For the ‘exam,’ the exams are questions around your experience. Include all your experience from every job to volunteer work, internships, leading groups and/or projects, and more. Don’t sell yourself short. Before you start the exam, review the sample questions in the exam bulletin. This gives you a sense of what we’ll ask you. Have your resume handy. You’ll need it during the exam.

Equal Opportunity Employer