Technology Engineer – Principal (1044) – Security Specialty - Citywide (C00100)

Company Description

THIS IS A CITYWIDE EXAM
San Francisco is a vibrant and dynamic city, on the forefront of economic growth & innovation, urban development, arts & entertainment, as well as social issues & change. This rich tapestry of culture and ideas is sustained by our City's commitment to heighten the quality of life for the diverse population of San Franciscans and residents of the greater Bay Area. Our employees play an important role not only in making our City what it is today, but also in shaping the future of San Francisco.

Specific information regarding this recruitment process is listed below.

Application Opening: 5/25/2022
Application Reposted: 11/06/2023 - Announcement reposted to reflect changes in the minimum qualifications.
Application Reposted: 6/24/2026 - The announcement has been reposted to incorporate updates to the class specification. These updates include a job title change, from IS Engineer – Senior to Technology Engineer – Senior and revisions to the minimum qualifications.
Application Deadline: Continuous

Job Description

Under general direction, provides direct ongoing supervision to other Technology Engineers and/or provides technical leadership and direction and assumes technical responsibility for completion of major projects, or serves as the top technical authority for one or more related specialties. Performs and reviews complex work involving analysis, planning, designing, implementation, maintenance, troubleshooting and enhancement of systems or platforms. Serves as the lead technical architect for systems or platforms.

The 1044 Principal Technology Engineer is the highest level in the Engineer series and may be assigned to function as a supervisor, expert or project leader. When assigned as a supervisor, develops, coordinates and executes policies, methods and procedures, and supervises personal; when assigned as an expert, performs work requiring a very high level of technical knowledge of a specific area or ability to integrate at a high level the knowledge of several areas (this is not considered to be a part of the normal career path for employees in this series; rather it is reserved for those employees with a mastery of specific technologies or a particular expertise); when assigned as a project leader, manages and provides technical leadership of projects involving large-scale, complex and highly analytical tasks. Work is performed within a broad framework of general policy and requires creativity and resourcefulness to accomplish goals and objectives, and in applying concepts, plans and strategies which may deviate from traditional methods and practices.

The Technology Engineer series is distinguished from the Technology Analyst/Designer series as the Technology Engineers build, implement, and maintain core technology infrastructure, whereas the Technology Analyst/Designers analyze business needs, designs systems and services, and oversee implementation and ongoing improvement.

Supervision Exercised:
May supervise subordinate Engineers staff and technical staff in the assigned work unit; or as a Project leader, coordinate a team of workers within the assigned work unit or jointly with other unites. May be expected to provide consultation and guidance to Technology professionals and non-Technology professionals.

Essential Duties:
1.    Architects, designs, implements, maintains and operates information system security and privacy controls and countermeasures; supervises and trains operators in the administration of these systems; documents the operation, use and expected outputs of these systems.
2.    Analyzes and recommends security and privacy controls and procedures in acquisition, development and change management lifecycle of information systems, and provides oversight to ensure compliance.
3.    Analyzes and recommends security and privacy controls and procedures in business processes related to use of information systems and assets, and provides oversight to ensure compliance.
4.    Monitors information systems for security incidents, vulnerabilities and privacy risks; develops monitoring and visibility capabilities; reports on incidents, vulnerabilities and trends to IT or executive management.
5.    Oversees the response to information system security and privacy incidents, including investigation of, countermeasures to and recovery from computer-based attacks, unauthorized access and policy breaches; engages, interacts and coordinates with third-party incident responders, including law enforcement.
6.    Oversees the administration of authentication and access controls, including provisioning, changes and deprovisioning of user and system accounts, security/a