Security Engineer (Hybrid, Jersey City, NJ)

Tecknomic is hiring a Security Engineer to support a major bi-state transportation authority that operates regional transportation infrastructure and facilities across New York and New Jersey. You will design, implement, and harden security architecture and tooling across on-premises, cloud, and hybrid environments. Work is assigned through project-based task orders from 2027 through 2030 and is hybrid, based mainly in Jersey City, NJ, with visits to other client sites in the region. We are building a bench at three levels (I, II, III); tell us which level fits you.

Responsibilities

• Engineer and maintain security platforms: SIEM, EDR, IAM/PAM, email/web security, and DLP

• Design security controls and hardening baselines (CIS, NIST 800-53) for servers, cloud, and network

• Lead security reviews of new systems and changes; perform threat modeling

• Implement identity, MFA, privileged access, and zero-trust capabilities

• Build detections and automations (SOAR, scripting) with the SOC

• Support penetration-test remediation, audits, and risk assessments

• Produce security architecture documentation and standards

2 to 5 years of security engineering or architecture.

Implements and maintains security tools and baselines under senior direction

5 to 8 years of security engineering or architecture.

Independently engineers security solutions and leads security reviews

8 plus years of security engineering or architecture.

Leads enterprise security architecture, zero-trust strategy, and complex implementations

Required (all levels)

• Bachelor’s degree in cybersecurity, computer science, or related field (or equivalent experience)

• Hands-on engineering of security platforms (SIEM, EDR, IAM/PAM, firewalls)

• Knowledge of NIST 800-53/CSF, CIS benchmarks, and secure architecture

• Scripting (PowerShell or Python)

• Able to work hybrid in Jersey City, NJ and travel to other client sites in NY/NJ

• Able to pass a background check and any client security requirements

Preferred

• Cloud security (Azure Defender, AWS Security Hub)

• OT/ICS security and ISA/IEC 62443

• Public-sector or critical-infrastructure environments

• Experience supporting a public agency, authority, or other regulated organization

Certifications

CISSP required or preferred for Level III; Security+ / CySA+ for Level I-II; CISM, CCSP, GIAC (GSEC, GCIA), or cloud security certs a plus

Required Skills

• Security architecture and hardening

• SIEM/EDR/IAM/PAM engineering

• Threat modeling and security reviews

• Zero trust and MFA

• Scripting and automation