Cybersecurity Architect

Salary : $125,174.40 - $169,000.00 Annually
Location : Eugene, OR
Job Type: Full-Time Regular
Job Number: 04555
Department: Central Services Department
Division: Information Services Division
Opening Date: 11/02/2026
Closing Date: Continuous

General Statement of Duties
THIS POSITION IS OPEN UNTIL FILLED

The next review of applications will take place: Tuesday, November 17, 2026

Accepting Online Applications Only through the City of Eugene Website

Information on How to Apply

PLEASE NOTE - Applications will be reviewed periodically.
Classification:
Salary Range: $125,174.40 - $169,000.00 Annually
The City of Eugene determines starting pay within the range based on relevant education and experience as provided by the applicant in their application materials. This process is consistent with the
Department/Division: Central Services/Information Services Division
Union Representation: Non-Represented, Exempt
Work Location: 500 E 4th Ave Eugene, OR 97401. Must live within 45 minutes of City of Eugene City Hall.
Work Schedule: Monday - Friday, 8:00 AM - 5:00 PM with flexibility per business need. Hybrid schedule with minimum of two in-office days per week. Potential on-call responsibilities and emergency response duties, occasional evening or weekend work during major incidents or system upgrades.
Benefits: The City of Eugene offers robust and competitive benefits. For more information, select the Benefits Tab, or view as well as see information about all
Bilingual Pay Benefit: This position qualifies for up to an additional 5% of base salary for bilingual pay. Please see "Supplemental Information" at the end of the posting for more information.
Living & Working in Eugene: Information about living in Eugene, how the City of Eugene operates, and more can be found on our

Examples of Duties Performed - Duties may include but are not limited to the following

Cybersecurity Architecture, Strategy, and Policy Development

• Creates and manages cybersecurity architecture, adhering to the NIST Cybersecurity Framework.
• Creates and/or advises on policies relating to cybersecurity standards and activities (examples: remote access policy, password policy).
• Tracks emerging threats, vulnerabilities, and technology trends relevant to municipal IT environments.
• Participates in the Information Services Division Architectural Review Board for any new or emerging technology changes.
• Scopes, evaluates, implements, configures, and manages security tools to meet the needs of the City's cybersecurity architecture and enhance the City's defensive posture.
• Researches and evaluates emerging risks and future technologies such as Frontier AI though a cybersecurity lens and suggests proactive actions to meet challenges created by these innovations.
• Maintains and enhances the City's cybersecurity strategy, policies, standards, and operational procedures.
• Ensures compliance with regulatory requirements including CJIS, HIPAA, PCI, and applicable state cybersecurity mandates.
• Conducts recurring security audits and risk assessments, producing prioritized recommendations to mitigate identified risks.

Security Operations, Tools Management, and Incident Response

• Supports business continuity and disaster recovery strategies, ensuring integration of cybersecurity requirements.
• Directs daily security operations, including real time monitoring, intrusion detection, Security Information and Event Management (SIEM), security log analysis, and identification of anomalous activity.
• Manages vulnerability scanning, configuration assessments, and remediation coordination with infrastructure and application teams.
• Oversees deployment, tuning, and lifecycle management of security platforms such as firewalls, Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), SIEM, and endpoint protection solutions.
• Leads the full lifecycle of incident response: triage, containment, eradication, forensic investigation, evidence collection, remediation guidance, and post incident analysis.
• Coordinates cross departmental incident response efforts and integrates findings into policy updates and improved security controls.
• Maintains and updates incident response plans, and tests plans with tabletop exercises or coordinated penetration testing.

Leadership, Collaboration, and Program Management

• Manages security program budget and provide prioritization of tools and staff resources to align with budget.
• Leads the security team including personnel management, skills development, and resource allocations.
• Works closely with IT teams, public safety partners, and external agencies to maintain secure system operations and interagency interoperability.
• Leads cybersecurity awareness initiatives and training programs for City employees.
• Prepares briefings, technical reports, audit responses, budgetary requests, and updates for executive leadership and City Council.
• Actively supports and respects diversity in the workplace.
• Complete designated job tasks, special projects, and all other duties as assigned to meet team, department, and City of Eugene goals while working cooperatively, efficiently, and productively in a team environment.
• Actively demonstrates high levels of employee engagement, accountability, coachability, and responsibility for personal performance and results.

To view detailed information on the duties, knowledge, and abilities that may be expected for this position, please see the classification:

Qualifications

Minimum Qualifications
Any combination of education and experience that would likely provide the required knowledge, skills, and abilities is qualifying.

Education:
Bachelor's degree in information security, computer science, information technology, or closely related field.
Master's degree in cybersecurity, IT management, or related field is preferred.

Experience:
Six (6) years of professional cybersecurity or information security experience, including experience with security standards and frameworks applicable to government systems. Two (2) years in a supervisory or leadership role.
Experience working in public-sector or municipal IT environments is preferred.

Licenses and Certifications:
Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Ethical Hacker (CEH), Security+, or equivalent are preferred.
Ability to acquire and maintain Criminal Justice Information Services (CJIS) certification within 90 days of hire.

Background:
Must pass a Criminal Justice Information Services (CJIS) background check prior to start date. To pass the background check incumbent must supply fingerprints, personal information, and signed authorization form.

Supplemental Information
Bilingual Pay Benefit

This benefit compensates non-represented employees up to 5% of their base salary. To qualify for bilingual pay, the employee must demonstrate fluency in an eligible language and pass a language proficiency test that is administrated by the City's Employee Resource Center division.

Non-Represented Retirement Program

Upon eligibility, the City will contribute an employee contribution of 6%, as well as the employer contribution, to a retirement program administered by the Oregon Public Employees' Retirement System (PERS). In addition, the City will pay a 3% contribution to a deferred compensation program if the employee contributes at least 1%.

From January 1, 2020, through December 31, 2034, most retirees may work for a PERS-participating employer for an unlimited number of hours while continuing to receive their pension benefit based on HB 2296. If you have questions about your specific situation, including any restrictions to hours, please refer to the PERS: Work After Retirement.

What to Expect from our Selection Process?

Applicants are screened based upon their relevant knowledge, abilities, skills, experience, and training. The selection process varies according to the position and can include such things as screening of supplemental questionnaires, written or skill tests, ability or fitness tests, interviews, and assessment processes.

Salary and Benefits
The normal starting salary is the first step shown on the posting. Other placement in the salary range may be considered depending on qualifications and experience. Periodic advancement through the salary range is dependent upon merit. The City provides a full range of benefits, including holidays, vacation, sick leave, retirement benefits, deferred compensation, physical examination, life insurance, and long-term disability. Health, dental, and vision benefits are available.

To view a and/or click the respective link. Click here to view information on all programs.
01

The supplemental questionnaire is scored and will be used to determine if you will proceed to the next phase of the selection process. Provide detailed answers to each question. Please do not reference your resume or application in your responses.Please use your own words to reflect your understanding when replying to the questions.Communication about our hiring process is primarily done through email and it is recommended to check your email OR governmentjobs.com account regularly after submitting your application.

• Yes
• No

02

I meet the minimum requirements for the Cybersecurity Architect position, which includes six years of professional cybersecurity or information security experience, including experience with security standards and frameworks applicable to government systems and two years in a supervisory or leadership role, and the equivalent to a Bachelor's degree from an accredited college or university in information security, computer science, information technology, or closely related field.

• I meet the requirements as written.
• I meet the requirements with a combination of experience and education totaling 10 years.
• I do not meet the requirements.

03

How has your approach to cybersecurity changed in relation to the developments in Frontier AI and agentic cybersecurity threats?
04

Describe a cybersecurity incident where you led the response. What went well and what lessons did you learn? How did it inform how you would respond to the next incident?
05

In a past role, describe how you've balanced software and cybersecurity tools with technician capacity and capability in your cyber operations given your budgetary constraints?
06

Describe how you would approach cybersecurity awareness training for the City of Eugene, taking into account the wide variety of roles of City employees
Required Question