Security Architecture Engineer (EMS 2)

WaTech: Leading the way forward!
Washington Technology Solutions (WaTech) is a national leader in adopting new, innovative technologies that transform the way Washingtonians receive state services. WaTech sets the strategic technology direction of the state in multiple domains and programs and is responsible for the state’s core technology services.

About the position
This position is a part of the Network Services Division (NSD) within WaTech, which delivers data networking, internet, cloud connectivity, telephony, and network security (firewall) services to Washington state agencies, federal entities, all counties, various cities, municipalities, school districts, boards, commissions, Tribes, and nonprofits.

As a Security Architecture Engineer, you will be relied on to provide advanced technical knowledge, hands on support, and considerable discretion to analyze, design, install, maintain, troubleshoot, and resolve complex problems with regards to WaTech Enterprise Security Services with a focus on the Enterprise Reverse Proxy, Enterprise Forward Proxy, Application Delivery, Security, and Traffic Management and other F5 based services. In this role you will ensure the state is secure and that all firewalls that control internet, interagency communication, and data center network traffic are allowing only authorized traffic and blocking unauthorized traffic as well as managing the statewide Domain Naming Service (DNS).

Duties

Some of what to expect with this role:

• Research, architect, and design strategic level networking technologies for use at WaTech and in the State Enterprise Network.
• Analyze current traffic flows and estimate (predict) how growth will affect the network and its supported services.
• Analyze the security risk of the network and independently initiate actions to minimize the impact of network security incidents and system events.
• Create logical designs, network-synthesis, and network realization to add clarity and understanding of design proposal(s).
• Research, identify and suggest potential technical solutions to meet agency or customer needs and future state.
• Interpret traffic statistics and utilization of network resources.
• Develop test plans, lab testing, integration testing, documentation and certification of hardware and OS related to network infrastructure.
• Analyze advanced hardware/software monitoring and diagnostic tools at the highest technical level within the state.
• Administer and implement SSL VPN Virtual Private Networks (VPN) solutions to all state agencies, counties and Tribes.
• Ensure the on-going operational maintenance of high visibility, mission critical services through procedural and change management controls.

Here’s what we’re looking for:

• 12 years of information technology (IT) experience.
• This experience must include:
  • Four years of experience with digital Certificates, PKI and crypto concepts, Http(s) protocols, and/or LDAP authentication and authorization.
  • Four years of experience with supporting F5 network gear to include Oracle database, Linux, VM Ware and SSL VPN, forward/reverse proxy technology.
  • Four years of experience with firewall, security tools, trends, technology vulnerabilities, security threats, tactics for attack, security best practices, etc.
  • Four years of experience with layer 3 network routing and switching experience in a production environment to include IP addressing and knowledge of network protocols, and security concepts.

* A bachelor’s degree in computer science or an equivalent technical discipline from an accredited college or university may be substituted on a year for year basis for up to four years of the required experience. *

Preference may be granted to applicants with the following:

• Network+, CCENT, CCNA or comparable certifications.
• F5 Administrator and APM certification.
• Security+, CISSP or comparable certifications.
• Security service edge (SSE) experience, such as:
  • Zero Trust Network Access (ZTNA)
  • Secure Web Gateway (SWG
  • Cloud Access Security Broker (CASB)
  • Cloud Firewall or Firewall-as-a-Service (FWaaS)

Telework: This position is approved for telework. However, it requires that the incumbent be within a two-hour commuting distance from the Olympia, WA office to response to emergencies and/or outages, lab testing and major maintenance activities.

We value diversity and different perspectives:
WaTech is committed to providing equal access and opportunities to all qualified applicants and employees. We seek to attract and retain a diverse staff and welcome your experiences, perspectives, and unique identity.

What WaTech Offers:
As an employee of WaTech, you’ll have access to an outstanding employee benefits package that includes medical and dental plan options for you and your family, paid leave and holidays, retirement plan options and more.

While WaTech is headquartered in Olympia, Washington, which is near some of the country’s most scenic national parks, we are able to offer many of our positions telework and flexible schedule options to help support a healthy work life balance.

To learn more about WaTech, and what our employees enjoy about working here, please visit our website.

How to apply:
Applications for this recruitment will be accepted electronically. Please select the large “apply button” at the top of this announcement. You may need to create a profile and account in Washington state’s automated application system. We invite you to include your name and pronouns in your material to ensure we address you correctly throughout the application process.

To be considered for this position you will need to:

• Submit your online application.
• Answer allrequired Supplemental Questions.
• Attach a Letter of Interest that addresses how your experience qualifies you for this role.
• Attach a Resume that clearly documents the work history, training, and education that makes you a viable and competitive candidate for this position.
• Include three professional references and their contact information.

Applicants wishing to claim Veterans Preference should attach a copy of their DD-214 (Member 4 copy), NGB 22, or signed verification of service letter from the United States Department of Veterans Affairs to their application. (Please redact any personally identifiable data such as social security number prior to submittal.)

Note:Applications without the requested attachments identified above or containing supplemental question responses with comments such as “see resume” may lead to your application being disqualified from consideration.

Conditions of employment:
This position requires a background check. Information from the background check will not necessarily preclude employment but will be considered in determining the applicant’s suitability and competence to perform in the position and is a continued condition of employment.

Recruitment process:
First round of application assessments will be conducted seven days after the initial job posting date. The hiring authority reserves the right to offer the position at any time after the initial seven-day job posting date during the recruitment process. It is to the applicant’s advantage to apply as early as possible. This recruitment may be used to fill multiple positions. 

Contact us: For inquiries about this position, please contact Rebekah Wilkes at (360) 407-8646 or email to [email protected]

Persons requiring accommodation in the application process or for an alternative format may contact Human Resources at (360) 407-8242 or [email protected]. Persons of disability or those who are deaf or hard of hearing can call the Washington Relay Service by dialing 7-1-1 or 1-800-833-6388. WaTech complies with the employment eligibility verification requirements of the federal Form I-9. The selected candidate must be able to provide proof of identity and eligibility to work in the United States consistent with the requirements of that form on the first day of employment.