Security Engineer

The principal responsibility is to provide highly effective security engineering support for DTI’s cloud environments, applications, and identity services. Services will be delivered efficiently, meet the needs of DTI and other state agencies, and comply with DTI policies and procedures. The position will work collaboratively with infrastructure, application development, security, and agency teams to design, implement, maintain, and troubleshoot security controls. The Senior Security Engineer is expected to be highly technical with a strong background across cloud, application, and identity security, including but not limited to:

• Cloud security platforms, services, and configuration management.
• Cloud identity and access management, privileged access, and secrets management.
• IAM administration and support, including single sign-on (SSO), multifactor authentication (MFA), application integrations, access policies, and user lifecycle management.
• Application and application programming interface (API) security.
• Application security testing, secure code review, and vulnerability remediation.
• Secure architecture reviews and threat modeling.
• Security automation, infrastructure as code, and integration of security controls into development and deployment pipelines.
• Troubleshooting cloud, application, and identity security issues in collaboration with technical teams and vendors.

Preferred Qualification

Applicants who do not possess the preferred qualification will still be eligible to compete for this position if job requirements are met.

• Possess a bachelor’s degree in information technology, computer science, cybersecurity, or a related field.
• Possess a certification in cloud cybersecurity, application security, or identity and access management relevant to the assigned services.
• Possess experience integrating applications with Okta using SAML, OpenID Connect (OIDC), OAuth 2.0, or SCIM.
• Possess experience securing cloud-native applications, containers, serverless services, or software supply chains.
• Possess experience applying NIST security frameworks, CIS Benchmarks, or OWASP application security guidance., * Possess a minimum of 5 years of hands-on experience in an enterprise IT environment, including cybersecurity, infrastructure engineering, or software development.
• Possess a minimum of 3 years of technical engineering experience in cloud security and/or application security, including hands-on experience in both areas.
• Possess experience implementing and supporting security controls in at least one major cloud platform, such as Microsoft Azure, Amazon Web Services (AWS), or Google Cloud.
• Possess experience identifying, validating, and remediating application or API vulnerabilities through security testing, secure code review, or threat modeling.
• Possess experience implementing identity and access controls, secure configurations, and protections for sensitive data across cloud environments and applications.
• Possess experience using scripting, infrastructure as code, or development and deployment pipelines to automate security controls or security testing., Criminal background check: A satisfactory fingerprint based criminal background check administered by the Delaware State Police is required as a Condition of Hire.

DTI’s Benefits to include:

Group Health Plan, Dental Plan, Vision Plan, Prescription, Flexible Spending (Health and Dependent Care), Long & Short Term Disability Insurance, Group Universal Life Insurance, Accident & Critical Illness Insurance, Health Management Programs.

21 paid vacation days, 15 paid sick days, 13 paid holidays, Up to 12 weeks paid Parental Leave.

Tuition reimbursement up to $4,000 annually.

State funded learning opportunities, mentor programs and professional development opportunities.

Employee Assistance Program: Access to support services such as Professional Counseling Services, Legal Services, Financial Services.

Employer & Employee Funded Pension Plan as well as an Employee Funded Retirement Savings Plan available.

The Department of Technology & Information (DTI) is Delaware’s central IT organization committed to providing technology services and collaborative solutions for Delaware while working to improve the lives of Delawareans through advanced technologies that innovate government services.

Employment with DTI is an opportunity to work in a collaborative environment that offers opportunities for professional development. DTI employees have the chance to work with ‘best in class IT companies’ offering our employees experience operating with some of the most talented in their field.

In addition to recruiting and retaining the best and brightest, DTI acknowledges and values the diversity of our employees. DTI recognizes that fostering a diverse workforce provides remarkable benefits in terms of innovative thinking, increased collection of skills and experiences, greater teamwork, and higher morale.