Cybersecurity Architect

Cybersecurity Architect

Salary

$125,174.40 - $169,000.00 Annually

Location

Eugene, OR

Job Type

Full-Time Regular

Job Number

04555

Department

Central Services Department

Division

Information Services Division

Opening Date

11/02/2026

Closing Date

Continuous

• Description
• Benefits
• Questions

General Statement of Duties

THIS POSITION IS OPEN UNTIL FILLED

The next review of applications will take place: Tuesday, November 17, 2026

Accepting Online Applications Only through the City of Eugene Website

Information on How to Apply

PLEASE NOTE - Applications will be reviewed periodically.

Classification: Cybersecurity Architect

Salary Range: $125,174.40 - $169,000.00 Annually

The City of Eugene determines starting pay within the range based on relevant education and experience as provided by the applicant in their application materials. This process is consistent with the Oregon Equal Pay Act (OEPA).

Department/Division: Central Services/Information Services Division

Union Representation: Non-Represented, Exempt

Work Location: 500 E 4th Ave Eugene, OR 97401. Must live within 45 minutes of City of Eugene City Hall.

Work Schedule: Monday - Friday, 8:00 AM - 5:00 PM with flexibility per business need. Hybrid schedule with minimum of two in-office days per week. Potential on-call responsibilities and emergency response duties, occasional evening or weekend work during major incidents or system upgrades.

Benefits: The City of Eugene offers robust and competitive benefits. For more information, select the Benefits Tab, or view benefits summaries as well as see information about all employee benefits.

Bilingual Pay Benefit: This position qualifies for up to an additional 5% of base salary for bilingual pay. Please see "Supplemental Information" at the end of the posting for more information.

Living & Working in Eugene: Information about living in Eugene, how the City of Eugene operates, and more can be found on our website.

Examples of Duties Performed - Duties may include but are not limited to the following

Cybersecurity Architecture, Strategy, and Policy Development

• Creates and manages cybersecurity architecture, adhering to the NIST Cybersecurity Framework.
• Creates and/or advises on policies relating to cybersecurity standards and activities (examples: remote access policy, password policy).
• Tracks emerging threats, vulnerabilities, and technology trends relevant to municipal IT environments.
• Participates in the Information Services Division Architectural Review Board for any new or emerging technology changes.
• Scopes, evaluates, implements, configures, and manages security tools to meet the needs of the City's cybersecurity architecture and enhance the City's defensive posture.
• Researches and evaluates emerging risks and future technologies such as Frontier AI though a cybersecurity lens and suggests proactive actions to meet challenges created by these innovations.
• Maintains and enhances the City's cybersecurity strategy, policies, standards, and operational procedures.
• Ensures compliance with regulatory requirements including CJIS, HIPAA, PCI, and applicable state cybersecurity mandates.
• Conducts recurring security audits and risk assessments, producing prioritized recommendations to mitigate identified risks.

Security Operations, Tools Management, and Incident Response

• Supports business continuity and disaster recovery strategies, ensuring integration of cybersecurity requirements.
• Directs daily security operations, including real time monitoring, intrusion detection, Security Information and Event Management (SIEM), security log analysis, and identification of anomalous activity.
• Manages vulnerability scanning, configuration assessments, and remediation coordination with infrastructure and application teams.
• Oversees deployment, tuning, and lifecycle management of security platforms such as firewalls, Intrusion Detection Systems (IDS), Intrusion Prevention Systems (IPS), SIEM, and endpoint protection solutions.
• Leads the full lifecycle of incident response: triage, containment, eradication, forensic investigation, evidence collection, remediation guidance, and post incident analysis.
• Coordinates cross departmental incident response efforts and integrates findings into policy updates and improved security controls.
• Maintains and updates incident response plans, and tests plans with tabletop exercises or coordinated penetration testing.

Leadership, Collaboration, and Program Management

• Manages security program budget and provide prioritization of tools and staff resources to align with budget.
• Leads the security team including personnel management, skills development, and resource allocations.
• Works closely with IT teams, public safety partners, and external agencies to maintain secure system operations and interagency interoperability.
• Leads cybersecurity awareness initiatives and training programs for City employees.
• Prepares briefings, technical reports, audit responses, budgetary requests, and updates for executive leadership and City Council.
• Actively supports and respects diversity in the workplace.
• Complete designated job tasks, special projects, and all other duties as assigned to meet team, department, and City of Eugene goals while working cooperatively, efficiently, and productively in a team environment.
• Actively demonstrates high levels of employee engagement, accountability, coachability, and responsibility for personal performance and results.

To view detailed information on the duties, knowledge, and abilities that may be expected for this position, please see the classification: Cybersecurity Architect

Qualifications

Minimum Qualifications

Any combination of education and experience that would likely provide the required knowledge, skills, and abilities is qualifying.

Education:

Bachelor's degree in information security, computer science, information technology, or closely related field.

Master's degree in cybersecurity, IT management, or related field is preferred.

Experience:

Six (6) years of professional cybersecurity or information security experience, including experience with security standards and frameworks applicable to government systems. Two (2) years in a supervisory or leadership role.

Experience working in public-sector or municipal IT environments is preferred.

Licenses and Certifications:

Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Ethical Hacker (CEH), Security+, or equivalent are preferred.

Ability to acquire and maintain Criminal Justice Information Services (CJIS) certification within 90 days of hire.

Background:

Must pass a Criminal Justice Information Services (CJIS) background check prior to start date. To pass the background check incumbent must supply fingerprints, personal information, and signed authorization form.

The City of Eugene encourages individuals of all communities and backgrounds to apply for job opportunities as we strive to provide the best service to the public. We are most interested in finding the best candidate for the job, and that candidate may be one who comes with relevant transferable knowledge, skills, and abilities from a variety of sources and experiences. If you are interested in applying, we encourage you to think broadly about your background and skill set for the role.

Supplemental Information

Bilingual Pay Benefit

This benefit compensates non-represented employees up to 5% of their base salary. To qualify for bilingual pay, the employee must demonstrate fluency in an eligible language and pass a language proficiency test that is administrated by the City's Employee Resource Center division.

Non-Represented Retirement Program

Upon eligibility, the City will contribute an employee contribution of 6%, as well as the employer contribution, to a retirement program administered by the Oregon Public Employees' Retirement System (PERS). In addition, the City will pay a 3% contribution to a deferred compensation program if the employee contributes at least 1%.

From January 1, 2020, through December 31, 2034, most retirees may work for a PERS-participating employer for an unlimited number of hours while continuing to receive their pension benefit based on HB 2296. If you have questions about your specific situation, including any restrictions to hours, please refer to the PERS: Work After Retirement.

What to Expect from our Selection Process?

Applicants are screened based upon their relevant knowledge, abilities, skills, experience, and training. The selection process varies according to the position and can include such things as screening of supplemental questionnaires, written or skill tests, ability or fitness tests, interviews, and assessment processes. In addition, background investigations and records checks may be required. Some positions also require applicants to have a psychological evaluation and/or physical examination and a drug test prior to employment. Marijuana use is evaluated consistent with current state law regulations. PLEASE NOTE: Once the posting closes, the process can take 4-6 weeks to complete.

Diversity, Equity, and Inclusion

The City of Eugene is committed to a respectful work environment. We value the cultural, educational, and life experiences of each employee. We believe that a diverse workforce enables us to deliver culturally responsive services to all members of our community. As part of our commitment to diversity, equity, and inclusion we desire to welcome, respect, and create a sense of belonging for a wide range of identities and experiences in our workforce. Women, people with disabilities, and persons of color are strongly encouraged to apply.

The City of Eugene complies with the Americans with Disabilities Act of 1990. Any applicant with a qualified disability under the Americans with Disabilities Act may request accommodation by contacting an employment coordinator at (541) 682-5061.

In compliance with the Immigration Reform and Control Act of 1986, the City of Eugene will request all eligible candidates who accept employment with the City to provide documentation to prove they are eligible for employment in the United States. NOTE: The City of Eugene does not participate in the E-Verify program; therefore, candidates requiring E-Verify for employment authorization will not be eligible for employment with the City.

If a job posting indicates this position is temporary (not limited duration) then the employee serves at will. Temporary employees do not receive benefits through the City of Eugene unless required by City, State or Federal code/statute.

Salary and Benefits

The normal starting salary is the first step shown on the posting. Other placement in the salary range may be considered depending on qualifications and experience. Periodic advancement through the salary range is dependent upon merit. The City provides a full range of benefits, including holidays, vacation, sick leave, retirement benefits, deferred compensation, physical examination, life insurance, and long-term disability. Health, dental, and vision benefits are available.

To view a summary of benefits and/or benefit premium rates click the respective link. Click here to view information on all Employee Benefits and Wellbeing programs.

01

The supplemental questionnaire is scored and will be used to determine if you will proceed to the next phase of the selection process. Provide detailed answers to each question. Please do not reference your resume or application in your responses. Please use your own words to reflect your understanding when replying to the questions. Communication about our hiring process is primarily done through email and it is recommended to check your email OR governmentjobs.com account regularly after submitting your application.

• Yes
• No

02

I meet the minimum requirements for the Cybersecurity Architect position, which includes six years of professional cybersecurity or information security experience, including experience with security standards and frameworks applicable to government systems and two years in a supervisory or leadership role, and the equivalent to a Bachelors degree from an accredited college or university in information security, computer science, information technology, or closely related field.

• I meet the requirements as written.
• I meet the requirements with a combination of experience and education totaling 10 years.
• I do not meet the requirements.

03

How has your approach to cybersecurity changed in relation to the developments in Frontier AI and agentic cybersecurity threats?

04

Describe a cybersecurity incident where you led the response. What went well and what lessons did you learn? How did it inform how you would respond to the next incident?

05

In a past role, describe how you've balanced software and cybersecurity tools with technician capacity and capability in your cyber operations given your budgetary constraints?

06

Describe how you would approach cybersecurity awareness training for the City of Eugene, taking into account the wide variety of roles of City employees

Required Question

Employer City of Eugene

Address City of Eugene

500 East 4th Avenue

Eugene, Oregon, 97401

Phone (541) 682-5061

Website www.eugene-or.gov