UDOT Agency Security OfficerStep into a pivotal role as the UDOT Agency Security Officer (ASO) and serving as the primary technical authority safeguarding Utah's Intelligent Transportation Systems (ITS) and Operational Technology (OT) infrastructure! In this dynamic position, you will protect mission-critical transportation systems-ranging from traffic switches, CCTV, and RWIS to signal networks, LPRs, cameras, and in-vehicle devices. You will shape agency-wide security strategy, manage vulnerability defenses, enforce robust network segmentation, and lead rapid incident response protocols across departmental systems, external vendors, and Department of Technology Services (DTS) partners.
Position InformationHere is some important information about this position:
Salary Range: $60.18 - $95.40
FT/PT Status: Full Time
Background Check: You must successfully pass a criminal history check.
Schedule Code: AX - Career Service exempt (at-will)
Location: Calvin Rampton Building - 4501 South 2700 West, Taylorsville, Utah | On-Site
Application Deadline: 12/1/2026*
*This job posting may close at any time after the minimum advertising period of three (3) business days has passed, should a sufficient applicant pool be received. Applicants are encouraged to apply as early as possible.
What You'll Do- ITS & OT Architecture: Oversee security architecture and network micro-segmentation to isolate UDOT's ITS systems, field controllers, traffic switches, and signal networks from external threats.
- Roadside & Edge Device Protection: Enforce physical and logical access controls across fiber connections, roadside cabinets, CCTV, RWIS, License Plate Readers (LPRs), and in-vehicle equipment.
- Device Access Governance: Define security baselines and administrative protocols for authenticating and updating field-deployed and centralized transportation devices.
- Network & Perimeter Coordination: Partner with DTS to configure firewalls, VPNs, and secure communication pathways for UDOT systems, vendors, and consultants.
- Vulnerability & Threat Management: Lead vulnerability identification, tracking, and firmware remediation while monitoring emerging threats targeting transportation networks.
- Incident Response: Develop, test, and maintain cybersecurity incident protocols, escalation workflows, and operating standards for handling system compromises.
- Identity & Credentials: Govern password vaulting, privileged account management, and multi-factor authentication across field and ops environments in alignment with DTS standards.
- Vendor Oversight: Enforce mandatory security compliance and remote access standards for contractors, consultants, and software vendors.
- Security Training: Deliver tailored security training for staff and technicians on device hardening, camera security, and field handling practices.
Knowledge, Skills, & Abilities- ICS/OT and transportation cybersecurity frameworks (e.g., NIST SP 800-82, NIST CSF, ISA/IEC 62443).
- Network architecture and segmentation for field networks (Layer 2/3 traffic switches, VLANs, routing protocols, firewalls).
- Security architecture and hardware hardening for edge/mobile assets (CCTV, LPRs, RWIS, signal controllers, in-vehicle tech).
- Port access security, NAC, 802.1X, and physical cabinet intrusion protection.
- Vulnerability scanning, audit tracking, intrusion detection, and incident response frameworks.
- Secure remote access (VPN tunnels, zero-trust network access, third-party vendor connection controls).
What You'll Bring- A degree in Electrical Engineering, Computer Engineering, Computer Science, or a related field, accompanied by ten (10) years of experience. OR, an equivalent combination of education and experience totaling fourteen (14) years.
PreferencesPreference may be given to candidates that possess:
- One or more Security Certifications (e.g. ISA/IEC, IC,IACS, CISSP, ICS/OT, SCADA)
- Experience architecting network segmentation and port access policies to secure industrial and field network hardware.
- Experience evaluating, deploying, and auditing security configurations across embedded field devices, cameras, LPRs, and in-vehicle systems.
- Experience formulating and executing incident response playbooks, remediation plans, and agency-wide cybersecurity standards.
- Experience tracking vulnerabilities and translating audit findings into prioritized remediation actions.
- Demonstrated ability to collaborate and liaise effectively across internal engineering divisions, central IT/DTS partners, contractors, and software vendors.
