Salary : $157,488.00 - $191,424.00 Annually
Location : Oakland, CA
Job Type: Full-time
Job Number: 26-094
Department: Information Systems Dept
Opening Date: 07/27/2026
Closing Date: 8/14/2026 4:30 PM Pacific

The Position

The East Bay Municipal Utility District's (EBMUD) Information Systems Department is currently seeking a Senior Information Technology Engineer with deep experience administering firewalls in mission-critical, highly available enterprise environments. The role focuses on securing both internal and perimeter networks, supporting business continuity and strengthening cyber resilience across business networks (IT) and operational technology networks (OT) and the implementation and oversight of cybersecurity policies, standards, and best practices.

Applicants must reside within commuting distance of EBMUD's Oakland, CA Administration building. This is a hybrid position which requires office presence in accordance with EBMUD's telecommuting guidelines (minimum 2-day per week physical office presence currently required but is subject to change). Telecommuting policies are subject to change. EBMUD will not provide relocation assistance.

We are seeking candidates with advanced IT/OT security experience and skills. Experience is desired in three or more of the following disciplines:
• At least five years of hands-on experience administering firewalls in enterprise-scale, high-availability production environments, including policy management, troubleshooting, and rule lifecycle maintenance.
• Experience with enterprise-grade firewalls: e.g. Palo Alto Networks, Cisco, FortiNet, Checkpoint.
• Expertise in troubleshooting network issues. Solid understanding of TCP/IP protocols.
• Experience configuring, supporting and managing routing- BGP, OSPF, EIGRP, static.
• Experience with analyzing firewall logs and packet captures.
• Experience managing virtual firewalls in AWS, Azure and/or GCP.
• Understanding of IAAS concepts.
• Experience implementing and supporting ssl-inspection in a production environment.
• Experience managing VPN's: IPSEC site to site and end user remote access.
• Experience working with firewall policies, implementing changes, testing changes, submitting changes through change control processes.
• Experience with automating firewall rule analysis or change workflows using scripts or APIs is a plus.

And the ability to:
• Create and maintain network diagrams and documentation for new and existing firewall deployments- depicting logical and physical environments.
• Communicate complex topics to non-technical users. Ability and willingness to share knowledge and information with others.
• Create documentation detailing implementation steps, tracking changes.
• Work across teams to investigate and respond to incidents.
• Lead or participate in IT/OT security projects by creating project plans and technical requirements.
• Track and report on incident handling and response metrics.
• Participate in annual tabletop cyber incident response exercises.
• Establish and maintain positive working relationships; teamwork attitude.
• Balance project deliverables among day-to-day operational demands.
• Perform independent research and share knowledge effectively.
• Maintain calm and focus during emergency operations.
• Work in a hybrid work environment.

The most competitive candidates for the Senior IT Security Engineer position will possess strong working knowledge of firewall administration in a highly available production environment; networking experience; threat intelligence; experience in critical infrastructure-including ICS/OT firewall management; and project management principles and practices and cybersecurity best practices.

Your experience will include demonstrated success working in many of the following areas:
• Experience managing firewall changes including: NAT, routing, VPN, access policies, troubleshooting, deployment, upgrades.
• Experience reviewing, analyzing and responding to firewall alerts: security and operational.
• Ability to perform and analyze network captures utilizing wireshark.
• Experience working within a ticketing system to track requests, changes, approvals
• Experience participating in Blue/Red team exercises.
• Log and systems analysis, troubleshooting, documentation techniques and procedures.
• Change control concepts and procedures supporting a production environment.
• Knowledge of network based attack methods and defense: DDOS, C2, data exfiltration, brute-force attacks, OWASP, etc.
• Familiarity with Industrial Control Systems (ICS) and Operational Technology (OT) environments is a plus.
• Project management.

The salary range is $13,124 per month increasing to $13,780, $14,469, $15,192, and $15,952 after 6, 18, 30, and 42 months, respectively.

Requirements

1. A bachelor's degree; and

2. Two years of experience** in information technology engineering, one year of which was at a level comparable to or higher than the EBMUD class of Information Technology (IT) Engineer II.

3. Willingness to participate in a rotating on-call schedule to support 24/7 network security operations, including incident response and critical issue resolution.

4. Overtime will be required on an as needed basis. Working environment is indoors and may require sitting for prolonged periods of time and repetitive hand motions.

*Additional years of experience (beyond the minimum requirement) may be substituted for the education on a year for year basis, only if the experience is at the level of the job for which the applicant is applying. (i.e., Four additional years of experience, at the level of the Senior IT Engineer classification, will be considered equivalent to a bachelor's degree).

**A graduate level degree in a directly related field may be substituted for one year of experience.

To be considered under the "equivalent combination of education and experience" provision, it is your responsibility to include in your application materials written evidence of employment performed at the level of the typical duties of this position and/or coursework in subject areas directly related to this position. For more information, see our FAQ page at http://www.ebmud.com/jobs/job-resources/job-faqs-frequently-asked-questions/.
The Selection Process

1. Please submit a completed EBMUD application and the required supplemental questions responses online at www.ebmud.com by 4:30 p.m., Friday, August 14, 2026. Only application materials submitted online during the filing period will be accepted.

2. Candidates must achieve a passing score on each test part to advance to the next step in the selection process.

3. All qualified applications and supplemental responses will be competitively evaluated. Candidates demonstrating the strongest qualifications for the position based on their supplemental responses may be invited to a panel interview tentatively scheduled for September 2026.

4. Successful candidates will be placed on the hiring list, based on rank, for further consideration to fill the current regular vacancy, as well as others occurring over the next 12 to 24 months.

5. The probation period for this position is 12 months. For those holding civil service status the probation period is 6 months.

6. All employment offers are conditional, pending the results of a Live Scan background screening. All selected finalists must participate in the Live Scan background screening process to remain in consideration for EBMUD employment.
Supplemental Information

As the first step in the selection process, responses to the supplemental questions must be submitted online with the regular EBMUD application. Please provide concise and clear responses to each question below. Your responses should accurately represent the roles and responsibilities described in your application's work history. Please limit your response to three paragraphs maximum each. Should you respond with comments such as "see application" or "see resume" instead of addressing the questions directly, your application may not be considered.
Our excellent benefits package includes:

• 12 days paid vacation; 16 holidays; 13 days paid sick leave;
• Family health insurance (choice of Kaiser fully paid or Sutter Health Plus or Anthem Blue Cross 85% paid);
• Fully paid family dental and vision care plans; life insurance; long-term disability insurance;
• EBMUD Retirement Plan (reciprocal with CalPERS);
• $1,000/yr. contributed to flexible spending account or cash;
• $145/mo. public transit subsidy;
• 401(k), 401(a) and 457(b) tax-deferred retirement plans; Roth 401(k);
• $3,500/yr. tuition reimbursement;
• And opportunities for professional growth including training and career development.

01

Applicants must reside within commuting distance of EBMUD's Oakland, CA Administration building. This is a hybrid position which requires office presence in accordance with EBMUD's telecommuting guidelines (minimum 2-day per week physical office presence currently required but is subject to change ). Telecommuting policies are subject to change. EBMUD will not provide relocation assistance.

• I accept these in-office requirements
• I do-not accept these in-office reporting requirements.

02

Technical:Please describe your experience in the following areas:Firewall administration: Specify the platforms you have worked with, number of years of experience with each, and any firewall or network administration certifications you hold. Include details about the environment you supported (e.g. enterprise, cloud, ICS/OT, size of the environment).
03

Security Incident investigation and response: Please describe your experience investigating and responding to cybersecurity incidents. Include details about the types of incidents you've handled, the tools and methodologies you used, how you coordinated with other teams, and any lessons learned that led to improvements in your organization's security posture.
Required Question