Join the City of Eugene’s Information Services Division as a Cybersecurity Architect and help strengthen secure systems across municipal services. This hybrid role supports a modern cybersecurity program with clear accountability, collaborative cross-department incident readiness, and ongoing opportunities to improve strategy, architecture, and operational controls.
Salary: USD 125,174 to 169,000 annually (range reflects $125,174.40 - $169,000.00). Hybrid work is supported, with a team schedule of Monday through Friday, 8:00 AM to 5:00 PM and flexibility based on business needs.
What you’ll do
Design, implement, and maintain the City’s cybersecurity architecture and program, aligned to recognized standards and built for government environments.
- Create and manage the City’s cybersecurity architecture in line with the NIST Cybersecurity Framework.
- Develop and/or advise on cybersecurity policies and standards, including items such as remote access and password policy.
- Maintain the City’s cybersecurity strategy, policies, standards, and operational procedures, and ensure they remain current.
- Track emerging threats, vulnerabilities, and technology trends relevant to municipal IT environments.
- Scope, evaluate, implement, configure, and manage security tools that support the defensive posture of the City.
- Research and evaluate emerging risks and future technologies, including Frontier AI, using a cybersecurity lens and recommending proactive actions.
- Ensure regulatory compliance including CJIS, HIPAA, PCI, and applicable state cybersecurity mandates.
- Conduct recurring security audits and risk assessments, producing prioritized recommendations to mitigate identified risks.
- Support business continuity and disaster recovery by integrating cybersecurity requirements into plans.
- Lead daily security operations, including real-time monitoring, intrusion detection, SIEM operations, security log analysis, and detection of anomalous activity.
- Manage vulnerability scanning, configuration assessments, and coordinate remediation with infrastructure and application teams.
- Oversee security platform deployment, tuning, and lifecycle management, including firewalls, IDS, IPS, SIEM, and endpoint protection solutions.
- Lead end-to-end incident response: triage, containment, eradication, forensic investigation, evidence collection, remediation guidance, and post-incident analysis.
- Coordinate cross-department incident response and incorporate lessons learned into improved controls and policy updates.
- Maintain and update incident response plans, and test plans using tabletop exercises and/or coordinated penetration testing.
- Manage the security program budget and prioritize tools and staff resources to align with budget.
- Lead and develop the security team, including personnel management, skills development, and resource allocations.
- Work closely with IT teams, public safety partners, and external agencies to maintain secure operations and interagency interoperability.
- Lead cybersecurity awareness initiatives and training programs for City employees.
- Prepare briefings, technical reports, audit responses, budgetary requests, and updates for executive leadership and City Council.
- Complete designated job tasks, special projects, and other duties as assigned, working cooperatively within team and department goals.
What you bring
- Bachelor’s degree in information security, computer science, information technology, or closely related field.
- Six (6) years of professional cybersecurity or information security experience, including experience with security standards and frameworks applicable to government systems.
- Two (2) years in a supervisory or leadership role.
- Experience in public-sector or municipal IT environments is preferred.
- Master’s degree in cybersecurity, IT management, or related field is preferred.
- Professional certifications such as CISSP, CISM, CEH, Security+, or equivalent are preferred.
- Ability to acquire and maintain CJIS certification within 90 days of hire.
- Must pass a CJIS background check prior to start date, including providing fingerprints, personal information, and a signed authorization form.
Tools and standards you’ll use
- NIST Cybersecurity Framework
- SIEM, security log analysis
- IDS, IPS
- Firewalls, endpoint protection solutions
- CJIS, HIPAA, PCI
- Frontier AI (risk evaluation)
Benefits and pay support
- Bilingual pay benefit: up to an additional 5% of base salary for bilingual pay (fluency required and proficiency test administered by the City’s Employee Resource Center division).
- Non-Represented Retirement Program: City contribution of 6% of an employee contribution, plus employer contribution, to a retirement program administered by Oregon Public Employees’ Retirement System (PERS).
- Non-Represented Retirement Program (deferred compensation): City will pay a 3% contribution to a deferred compensation program if the employee contributes at least 1%.
- Robust and competitive benefits (details referenced via the Benefits Tab/benefits summaries).
Work location: 500 E 4th Ave, Eugene, OR 97401. Must live within 45 minutes of City of Eugene City Hall. Hybrid schedule requires a minimum of two in-office days per week.
Schedule and coverage: Monday through Friday, 8:00 AM to 5:00 PM with flexibility per business need. Potential on-call responsibilities and emergency response duties, with occasional evening or weekend work during major incidents or system upgrades.
Selection process and compliance
- Applicants are screened based on relevant knowledge, abilities, skills, experience, and training.
- The process may include screening supplemental questionnaires, written or skill tests, ability or fitness tests, interviews, and assessment processes.
- Background investigations and records checks may be required.
- Some roles may require psychological evaluation and/or physical examination and a drug test prior to employment; marijuana use is evaluated consistent with current state law.
- Once the posting closes, the process can take 4-6 weeks.
- As required by the Immigration Reform and Control Act of 1986, the City requests documentation from eligible candidates. The City of Eugene does not participate in E-Verify, so candidates requiring E-Verify for employment authorization will not be eligible.
Equity and inclusion: Women, people with disabilities, and persons of color are strongly encouraged to apply.
