Department:Location:Belknap Campus
Time Type:Full time
Worker Type:Regular
Job Req ID:R109233
Minimum Requirements:Bachelor's degree in Computer Science or a related field and eight (8) years of relevant experience or an equivalent combination of education and experience. Grade10 (Salaried)
Position Description:The University of Louisville is seeking an experienced and service-oriented
IT Systems Engineer V (Cybersecurity Engineer) to design, implement, and maintain enterprise cybersecurity systems and infrastructure. This position will serve as a senior technical resource for security engineering, helping protect university information assets, networks, cloud environments, and research systems against evolving threats while supporting regulatory and higher education security requirements.
The successful candidate will demonstrate advanced proficiency in enterprise security engineering, complemented by a collaborative approach and the ability to translate complex technical risks and controls into practical, supportable solutions. Experience in higher education, research computing, or clinical and operational security environments is a plus.
This job may require access to technology, data and software source code that is subject to US export controls. An offer of employment is contingent upon verifying U.S.-person status or obtaining the necessary export control licenses to perform the job functions.
Key responsibilities for this role include:- This is a hybrid role, combining remote work with on-site presence as needed.
- Plan, implement, and maintain technical security measures, controls, platforms, and engineering solutions across university infrastructure.
- Configure, operate, and maintain enterprise security technologies, including firewalls, IDS/IPS, SIEM, EDR, DLP, and vulnerability management platforms.
- Monitor, identify, and mitigate security risks, and lead technical response activities during cybersecurity incidents and investigations.
- Engineer and manage identity and access management services, including directory services, single sign-on, multi-factor authentication, and privileged access management.
- Develop and maintain security automation and orchestration capabilities to improve detection, response, and operational efficiency.
- Design and support enterprise security architectures, including network segmentation, zero trust frameworks, cloud security posture management, certificate lifecycle management, and PKI.
- Conduct security architecture reviews for new systems, applications, and cloud environments, and recommend technologies aligned with university objectives and higher education best practices.
- Support regulatory and contractual compliance initiatives, including HIPAA/ePHI, FERPA, PCI-DSS, CMMC, and NIST 800-171, through implementation of associated technical controls.
- Collaborate with security operations, network engineering, infrastructure, application, data, and research computing teams to deploy secure and resilient services.
- Develop and maintain architecture diagrams, runbooks, standard operating procedures, and other security engineering documentation.
- Mentor colleagues and serve as a technical resource for IT security projects and university technology initiatives.
- Remain informed about the evolving threat landscape, emerging attack vectors, security technologies, and best practices relevant to higher education.
Preferred qualifications:- Master's degree in a related field.
- Experience with firewalls, IDS/IPS, EDR, vulnerability scanning, and SIEM technologies.
- Knowledge of technical infrastructure, networks, databases, and systems in relation to IT security and IT risk.
- Familiarity with security and compliance frameworks such as NIST, ISO, and PCI-DSS.
- Excellent oral, written, and interpersonal communication skills, including the ability to explain complex technical topics to a non-technical, business-focused audience.
- Strong leadership, collaboration, and team management skills.
- CISSP or another information security-related certification.
- Network engineering and system administration experience.
- Cloud security experience in Azure, AWS, or GCP, including cloud-native security services.
- Microsoft 365 security experience, including Microsoft Defender, Sentinel, Intune, and Purview.
- Experience with identity platforms such as Microsoft Entra ID and Active Directory, Duo, or Fischer Identity.
- Familiarity with higher education IT environments, research computing, secure enclaves, or clinical and operational security requirements.
Compensation will be commensurate to candidate experience. 
