> Markdown version of [/jobs/ext/1265046-security-architect](https://www.wearedevelopers.com/jobs/ext/1265046-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Architect - **Company:** California Department of Public Health - **Location:** Sacramento County, CA, United States (Remote available) - **Salary:** $114,084.0 - $152,880.0 - **Contract:** Permanent contract - **Skills:** Application Firewall, Cyber Security, Databases, Data Security, Identity and Access Management, Key Management, Network Architecture, Data Classification, Cyber Threat Analysis, Information Technology, Cyber Warfare - **Published:** July 14, 2026 - **Apply:** https://www.calcareers.ca.gov/CalHrPublic/Jobs/JobPosting.aspx?JobControlId=524363 ## About the Role In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate: * Knowledge of security assessment and authorization (SA&A) processes. * Knowledge of systems security engineering (SSE) principles and practices. * Knowledge of technology integration processes. * Knowledge of network infrastructure principles and practices. * Knowledge of identity and access management (IAM) principles and practices. * Knowledge of database systems and software. * Knowledge of server administration principles and practices. * Knowledge of enterprise architecture (EA) reference models and frameworks. * Knowledge of enterprise architecture (EA) principles and practices. * Knowledge of key management service (KMS) principles and practices. * Knowledge of encryption algorithms, tools and techniques. * Knowledge of cryptographic key management principles and practices. * Knowledge of cybersecurity & privacy laws and regulations. * Knowledge of Personally Identifiable Information (PII) data security standards and best practices. * Knowledge of data classification standards and best practices. * Knowledge of privacy impact/threshold principles and practices. * Knowledge of new and emerging technologies. * Knowledge of risk management, assessment principles and practices. * Knowledge of defense-in-depth principles and practices. * Knowledge of application firewall principles and practices. * Knowledge of cybersecurity threats and vulnerabilities. * Knowledge of cyber defense tools and techniques. * Knowledge of business continuity and disaster recovery (BCDR) policies and procedures. ## Description All applicants will be considered, however SROA/Surplus candidates will be given priority. Are you interested in making life better for Californians? Are you looking for a career and not just a job? Do you want to create a meaningful impact in your community? If you answered yes to any of these questions, then the California Department of Tax and Fee Administration (CDTFA) has a career opportunity waiting for you! California not only needs you, it wants you as part of the growing workforce. New employees, new ideas, and new creative perspectives are needed in all areas at the CDTFA. We value staff and are dedicated to employee career development. Our agency supports the development of staff by offering training to flourish in their position and programs to promote and explore upward mobility. To learn more about us, please see CDTFA Gateway to New Opportunities video Under the direction of the Chief Information Security Officer (CISO) Information Technology Manager II (IT Manager II), the Information Technology Specialist III (IT Spec III) serves as the Security Architect for the California Department of Tax & Fee Administration (CDTFA). In this role, the Security Architect provides expert level technical leadership on enterprise security architecture. The Security Architect functions as a principal technical authority for security architecture, including cloud, network, systems, applications, and browser security, along with data security, privacy and security by design practices, and the development of information security standards. The Security Architect works with enterprise-wide staff to ensure that enterprise systems, data, and platforms are designed and operated securely, in alignment with applicable State and Federal regulatory requirements, information security frameworks, and industry accepted best practices. The Security Architect maintains expert level knowledge in the evolving cyber threat landscape and in enterprise risk architecture and management., Under Government Code 14200, this position may be eligible for partial telework for eligible candidates residing in California. All telework/hybrid schedules require staff to report to the office a minimum number of days per week. Schedules are subject to change. Currently, per the California Budget Act of 2025, all California Department of Tax and Fee Administration salaries are subject to the provisions of the State of California's Personal Leave Program. This is a re-advertisement of JC-509123. If you previously applied under JC-509123 you would need to re-apply under this new Job Control, JC-524363 in order to be considered. This recruitment has been posted for more vacancies than currently exist as it may be used to fill additional identical vacancies which occur within 180 days of the closing date of this bulletin., Dates printed on Mobile Bar Codes, such as the Quick Response (QR) Codes available at the USPS, are not considered Postmark dates for the purpose of determining timely filing of an application. Final Filing Date: Until Filled Who May Apply Individuals who are currently in the classification, eligible for lateral transfer, eligible for reinstatement, have list or LEAP eligibility, are in the process of obtaining list eligibility, or have SROA and/or Surplus eligibility (please attach your letter, if available). SROA and Surplus candidates are given priority; therefore, individuals with other eligibility may be considered in the event no SROA or Surplus candidates apply. Individuals who are eligible for a Training and Development assignment may also be considered for this position(s). ## Related Videos - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Web-based Information Visualization](https://www.wearedevelopers.com/videos/84-web-based-information-visualization) - [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1146-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)