Technology Engineer – Senior (1043) - Security Specialty - Citywide (C00096)

Company Description

THIS IS A CITYWIDE EXAM
San Francisco is a vibrant and dynamic city, on the forefront of economic growth & innovation, urban development, arts & entertainment, as well as social issues & change. This rich tapestry of culture and ideas is sustained by our City's commitment to heighten the quality of life for the diverse population of San Franciscans and residents of the greater Bay Area. Our employees play an important role not only in making our City what it is today, but also in shaping the future of San Francisco.

Specific information regarding this recruitment process is listed below.

Application Opening: 5/25/2022
Application Reposted: 11/06/2023 - Announcement reposted to reflect changes in the minimum qualifications.
Application Reposted: 6/24/2026 - The announcement has been reposted to incorporate updates to the class specification. These updates include a job title change, from IS Engineer – Senior to Technology Engineer – Senior and revisions to the minimum qualifications.
Application Deadline: Continuous

Job Description

Under general direction, analyzes, plans, designs, implements, maintains, troubleshoots and enhances technology. Serves as the senior technical contributor for systems or platforms.

The 1043 Senior Technology Engineer is the advanced journey level in the Engineer series. The class is distinguished from the journey level 1042 Technology Engineer by the complexity and size of the systems or network supported. It is also distinguished from the Journey level by the amount of discretion exercised over technical issues, problems and resolutions, and that it possesses a significant level of specialized technical and functional expertise beyond that expected at the Journey level. Tis level is distinguished from the Principal level 1044 Technology Engineer – Principal in that Senior level exercises no or limited supervisory responsibilities or the lower technical leadership displayed. Positions at this level require highly specialized performance of their duties. The Senior level formulates recommendations consistent with directives, policies, standards and regulations. Work is judged primarily on overall results with great latitude in determining work methods and assignment requirements. The Senior has greater authority over assignments and decisions required to complete the work than lower level classifications.

This classification performs a wide range of complex analytical, design, planning, implementation, enhancement and problem resolution tasks on systems and platforms. It works within a framework of established procedures and interprets policies, procedures and guidelines. This level may formulate recommendations consistent with directives, policies, standards and regulations. Incumbents require only occasional instruction or assistance. Work is reviewed upon completion and for overall results.

The Technology Engineer series is distinguished from the Technology Analyst/Designer series as the Technology Engineers build, implement, and maintain core technology infrastructure, whereas the Technology Analyst/Designers analyze business needs, designs systems and services, and oversee implementation and ongoing improvement.

Supervision Exercised:
May provide direction to subordinate Engineer staff and other technical staff. May provide consultation and guidance to all other Technology job families. Such responsibilities are ancillary to the main intent and focus of the position.

Essential Duties:
1.    Architects, designs, implements, maintains and operates information system security and privacy controls and countermeasures.
2.    Analyzes and recommends security and privacy controls and procedures in acquisition, development, and change management lifecycle of information systems, and monitors for compliance.
3.    Analyzes and recommends security and privacy controls and procedures in business processes related to use of information systems and assets, and monitors for compliance.
4.    Monitors information systems for security incidents, vulnerabilities and privacy risks; develops monitoring and visibility capabilities; reports on incidents, vulnerabilities and trends.
5.    Responds to information system security and privacy incidents, including investigation of, countermeasures to and recovery from computer-based attacks, unauthorized access and policy breaches; interacts and coordinates with third-party incident responders, including law enforcement.
6.    Administers authentication and access controls, including provisioning, changes and deprovisioning of user and system accounts, security/access roles and access permissions to information assets.
7.    Ana