- Salary
- $107k – $150k/yr
- Location
- Portland 97218, OR, OR, US
- Workplace
- Remote
- Department
- Engineering
- Source
- GovernmentJobs
Description
The Port of Portland is hiring a
Senior Hybrid-Cloud System Engineer (Security)
The Senior Hybrid-Cloud System Engineer (Security) ensures the Port’s hybrid IT infrastructure is secure, resilient, and scalable by leading the design, integration, and deployment of modern cloud and on-premises technologies. This role serves as a technical security expert, partnering closely with Information Security to translate emerging threats and standards into effective operational controls. By architecting solutions across AWS, Azure, and on-premises environments, this position enhances the Port’s security posture and supports critical business objectives.
From the hiring manager:
Imagine engineering the technology backbone of an international airport—where every system you touch keeps people moving safely and keeps operations running flawlessly. On our IT Infrastructure team, you won’t just maintain systems; you’ll shape them and keep them secure. We’re a tight-knit, constantly learning group that loves exploring new technologies and tackling complex challenges. From securing a mission-critical environment to driving emerging IT initiatives across the Port, you’ll work on standout projects that truly matter. If you’re energized by solving real-world problems at scale and want to grow in a culture that values curiosity, collaboration, and innovation, this is where your impact will take off.
Key Responsibilities
Hybrid Infrastructure Engineering and Automation
- Engineer secure, scalable, and operationalized cloud and on-prem infrastructure solutions using modern architectural frameworks and automation-first strategies.
- Develop, maintain, and optimize CI/CD pipelines with integrated security scanning, compliance validation, and deployment automation.
- Implement and manage infrastructure-as-code workflows and automation (Terraform, CloudFormation, Ansible, GitHub Actions, Jenkins).
- Design and administer application-layer, network, and cloud security controls, including firewalls, IAM policies, segmentation, and monitoring.
- Integrate complex systems and services with automated scanning, policy enforcement, and security instrumentation.
Security Engineering and Architecture
- Lead the design and implementation of secure hybrid-cloud architecture across AWS, Azure, and on-prem systems.
- Partner with the Information Security team to translate organizational security requirements into engineered controls, secure deployment patterns, and automated policy enforcement.
- Develop and maintain secure configuration standards, reference architectures, and runbooks for infrastructure and application-layer security technologies.
- Evaluate emerging technologies (AI, Kubernetes orchestration, service mesh architectures, GitOps workflows, and advanced cloud constructs) to drive innovation and organizational transformation.
Security and Operational Incident Response and Compliance
- Respond as primary security engineer to hybrid-infrastructure security events, outages, and complex incident investigations.
- Conduct root cause analysis, implement containment and remediation actions, and lead preventative hardening efforts across multi-cloud and on-prem systems.
- Support internal, external security, and operational audits by providing technical documentation, system evidence, compliance reporting, and performing systems remediation activities.
Full position description available upon request.
- Five (5) + years of progressive experience in Administration and/or engineering of cloud and hybrid infrastructure server environments.
- Bachelor’s Degree – Computer Science or related field, or a combination of related education, industry certification, and demonstrated experience.
- Ability to pass a criminal history records check to allow entry to secure airport areas (Grey Badge).
- CJIS background clearance (due to access to secure information at the airport).
- Clear credit check (due to access to sensitive financial information).
Senior-level Knowledge, Skills & Abilities desired for this role
- Hybrid Cloud & Infrastructure Concepts: Architecture and operations across AWS, Azure, and on-premises platforms; virtualization; operating systems; enterprise identity systems; core infrastructure services.
- Security Frameworks & Principles: NIST CSF, CIS Controls, zero-trust architecture; IAM and PAM concepts; encryption, PKI, secrets management; policy-based security models.
- DevSecOps & Automation Foundations: CI/CD concepts, infrastructure-as-code methodologies, secure coding practices, GitOps principles, automated compliance validation.
- Architect and deliver secure hybrid-cloud solutions across AWS, Azure, and on-prem environments.
- Implement engineered security controls, secure deployment pipelines, and automated policy enforcement.
- Troubleshoot and resolve complex incidents spanning cloud, network, compute, and application layers.
- A minimum qualification evaluation of the education, training, and experience of submitted application packets will take place by Talent Acquisition until this role closes.
- A Subject Matter Expert (SME) Panel will perform an evaluation of experience and training taken from your employment application materials.
- Our goal is to notify candidates who are selected for interviews the week following the close of the posting. We will then schedule the virtual first round of interviews with candidates who successfully passed the SME evaluation. Panel Interviews will be held afterward.
