Senior Cyber Security Engineer (firewall) (remote From Anywhere In CO) - Remote Eligible

Senior Cyber Security Engineer (Firewall)

Salary $109,000.00 - $124,000.00 Annually Location Statewide, CO Job Type Full Time Department Governor's Office of Information Technology Opening Date 01/12/2026 Closing Date 1/22/2026 11:59 PM Mountain FLSA Status Exempt

Together, we innovate for a stronger Colorado. The work of employees at the Governor's Office of Information Technology (OIT) is challenging and diverse because the needs of agencies, customers and Coloradans constantly evolve. But our focus never changes: improve the lives of all Coloradans through innovation and collaboration. We're building one of the nation's leading government IT organizations by reimagining how we support agencies, building first-of-their-kind applications, and creating an inclusive, collaborative culture, together. Join us in the important work of providing equitable access to services.

We are seeking a cybersecurity domain expert to oversee State agency and data center firewalls, enterprise Web filtering, VPN/remote access, access control and other security devices. Responsible for the configuration, deployment and maintenance of comprehensive enterprise security infrastructure. As our new Senior Cyber Security Engineer, you will design, configure, deploy, and maintain the state enterprise security infrastructure with a primary focus on four firewall infrastructure. Completes any necessary security reports and audit responses, ensures that the state is compliant with all applicable regulations and participates in statewide working groups for developing state security policies, guidelines, best practices, and strategy.

Some of the day to day opportunities:

• Implement firewall solutions to properly secure State data and provide consultation on all new firewall implementations, firewall configuration changes, and projects requiring security operational support
• Provides frontline support for implementation and management of a variety of security systems, including firewalls, VPNs, and other network security devices
• Ensure change management is strictly followed for all production systems, utilizing the CA system for all production related changes
• Mentors entry and journey security staff
• Performs as technical lead if requested
• Develops methodology and documents configurations and configuration changes to the network security devices
• Provides additional network security services as needed

Minimum Qualifications, Substitutions, Conditions of Employment & Appeal Rights A wide salary range is posted for this position and any job offer is based upon a salary analysis to comply with the Colorado Equal Pay for Equal Work Act. The salary analysis considers relevant experience, education, certifications, and state seniority as compared to others doing substantially similar work. While all offers are compliant with the Colorado Equal Pay for Equal Work Act, there is no guarantee an offer will be at the top of the posted range based on the salary analysis. This is a skills-based job announcement. The required minimum qualifications and/or education (if substituting for the proven experience, knowledge, and skills), are as follows:

Minimum Qualifications: A minimum of five (5) years of experience in a security engineering, secure code reviews, systems administration, or compliance advisory role in a variety of technical environments, including on-premise, cloud, and hybrid. A minimum of two years of experience as a firewall engineer designing enterprise security infrastructure.

Substitutions: Additional appropriate education will substitute for the required experience on a year-for-year basis, but cannot completely substitute for these qualifications. Training or Certification related to the work assigned to the position will be assigned credit towards substitution for experience and/or education, but cannot completely substitute for these qualifications. If the minimum qualifications include a degree requirement, additional appropriate paid or unpaid experience will substitute for the required education on a year-for-year basis.

Preferred Qualifications: Prior experience working in a government agency. Palo Alto and ASA firewall experience. Relevant certifications.

Conditions of Employment: OIT employees must comply with any screening procedures in place at state entity locations where they might be required to perform work. A pre-employment background check will be conducted as part of the selection process. Positions supporting some agencies such as the Department of Corrections and the Department of Public Safety will also require a pre-employment drug test. This position may require travel within the specified geographic area, and to locations across the state as needed.

All remote work must be performed in Colorado. While candidates from out of state will be considered for this role, the candidate selected for the position must relocate and reside in Colorado on the first day of their new position. A reasonable timeframe for relocation will be established on an individual basis, while considering business needs, and determining a start date.

We know it's important to support each other, and that means having a healthy balance of work and personal time. Visit our benefits to learn more about some of our great offerings that allow us all to have fulfilling lives.

The State of Colorado strives to create a Colorado for All by building and maintaining workplaces that value and respect all Coloradans through a commitment to equal opportunity and hiring based on merit and fitness. The State is resolute in non-discriminatory practices in everything we do, including hiring, employment, and advancement opportunities. The Governor's Office of Information Technology is committed to the full inclusion of all qualified individuals. As part of this commitment, our agency will assist individuals who have a disability with any reasonable accommodation requests related to employment, including completing the application process, interviewing, completing any pre-employment testing, participating in the employee selection process, and/or to perform essential job functions where the requested accommodation does not impose an undue hardship.