Cybersecurity Architect

Join the City of Eugene’s Information Services Division as a Cybersecurity Architect and help strengthen secure systems across municipal services. This hybrid role supports a modern cybersecurity program with clear accountability, collaborative cross-department incident readiness, and ongoing opportunities to improve strategy, architecture, and operational controls.

Salary: USD 125,174 to 169,000 annually (range reflects $125,174.40 - $169,000.00). Hybrid work is supported, with a team schedule of Monday through Friday, 8:00 AM to 5:00 PM and flexibility based on business needs.

What you’ll do

Design, implement, and maintain the City’s cybersecurity architecture and program, aligned to recognized standards and built for government environments.

• Create and manage the City’s cybersecurity architecture in line with the NIST Cybersecurity Framework.
• Develop and/or advise on cybersecurity policies and standards, including items such as remote access and password policy.
• Maintain the City’s cybersecurity strategy, policies, standards, and operational procedures, and ensure they remain current.
• Track emerging threats, vulnerabilities, and technology trends relevant to municipal IT environments.
• Scope, evaluate, implement, configure, and manage security tools that support the defensive posture of the City.
• Research and evaluate emerging risks and future technologies, including Frontier AI, using a cybersecurity lens and recommending proactive actions.
• Ensure regulatory compliance including CJIS, HIPAA, PCI, and applicable state cybersecurity mandates.
• Conduct recurring security audits and risk assessments, producing prioritized recommendations to mitigate identified risks.
• Support business continuity and disaster recovery by integrating cybersecurity requirements into plans.
• Lead daily security operations, including real-time monitoring, intrusion detection, SIEM operations, security log analysis, and detection of anomalous activity.
• Manage vulnerability scanning, configuration assessments, and coordinate remediation with infrastructure and application teams.
• Oversee security platform deployment, tuning, and lifecycle management, including firewalls, IDS, IPS, SIEM, and endpoint protection solutions.
• Lead end-to-end incident response: triage, containment, eradication, forensic investigation, evidence collection, remediation guidance, and post-incident analysis.
• Coordinate cross-department incident response and incorporate lessons learned into improved controls and policy updates.
• Maintain and update incident response plans, and test plans using tabletop exercises and/or coordinated penetration testing.
• Manage the security program budget and prioritize tools and staff resources to align with budget.
• Lead and develop the security team, including personnel management, skills development, and resource allocations.
• Work closely with IT teams, public safety partners, and external agencies to maintain secure operations and interagency interoperability.
• Lead cybersecurity awareness initiatives and training programs for City employees.
• Prepare briefings, technical reports, audit responses, budgetary requests, and updates for executive leadership and City Council.
• Complete designated job tasks, special projects, and other duties as assigned, working cooperatively within team and department goals.

What you bring

• Bachelor’s degree in information security, computer science, information technology, or closely related field.
• Six (6) years of professional cybersecurity or information security experience, including experience with security standards and frameworks applicable to government systems.
• Two (2) years in a supervisory or leadership role.
• Experience in public-sector or municipal IT environments is preferred.
• Master’s degree in cybersecurity, IT management, or related field is preferred.
• Professional certifications such as CISSP, CISM, CEH, Security+, or equivalent are preferred.
• Ability to acquire and maintain CJIS certification within 90 days of hire.
• Must pass a CJIS background check prior to start date, including providing fingerprints, personal information, and a signed authorization form.

Tools and standards you’ll use

• NIST Cybersecurity Framework
• SIEM, security log analysis
• IDS, IPS
• Firewalls, endpoint protection solutions
• CJIS, HIPAA, PCI
• Frontier AI (risk evaluation)

Benefits and pay support

• Bilingual pay benefit: up to an additional 5% of base salary for bilingual pay (fluency required and proficiency test administered by the City’s Employee Resource Center division).
• Non-Represented Retirement Program: City contribution of 6% of an employee contribution, plus employer contribution, to a retirement program administered by Oregon Public Employees’ Retirement System (PERS).
• Non-Represented Retirement Program (deferred compensation): City will pay a 3% contribution to a deferred compensation program if the employee contributes at least 1%.
• Robust and competitive benefits (details referenced via the Benefits Tab/benefits summaries).

Work location: 500 E 4th Ave, Eugene, OR 97401. Must live within 45 minutes of City of Eugene City Hall. Hybrid schedule requires a minimum of two in-office days per week.

Schedule and coverage: Monday through Friday, 8:00 AM to 5:00 PM with flexibility per business need. Potential on-call responsibilities and emergency response duties, with occasional evening or weekend work during major incidents or system upgrades.

Selection process and compliance

• Applicants are screened based on relevant knowledge, abilities, skills, experience, and training.
• The process may include screening supplemental questionnaires, written or skill tests, ability or fitness tests, interviews, and assessment processes.
• Background investigations and records checks may be required.
• Some roles may require psychological evaluation and/or physical examination and a drug test prior to employment; marijuana use is evaluated consistent with current state law.
• Once the posting closes, the process can take 4-6 weeks.
• As required by the Immigration Reform and Control Act of 1986, the City requests documentation from eligible candidates. The City of Eugene does not participate in E-Verify, so candidates requiring E-Verify for employment authorization will not be eligible.

Equity and inclusion: Women, people with disabilities, and persons of color are strongly encouraged to apply.