Sr. IT Security Administrator

Sr. IT Security Administrator

Salary

$110,822.40 - $149,240.00 Annually

Location

Orange County

Job Type

Full-Time Regular

Job Number

7985SM-0926-060 (O)

Department

Sheriff-Coroner

Opening Date

10/13/2026

Closing Date

Continuous

• Description
• Benefits
• Questions

CAREER DESCRIPTION

SR. IT SECURITY ADMINISTRATOR

Salary may be negotiable within the range listed above, based on position requirements and successful candidates qualifications, subject to appropriate authorization.

OPEN TO THE PUBLIC

This recruitment will establish an open eligible list that will be used to fill current and future Sr. IT Security Administrator positions. The eligible list established may also be used to fill positions in similar and/or lower classifications throughout the County of Orange.

DEADLINE TO APPLY

Recruitment is open to the public and will remain open on a continuous basis for a minimum of five (5) business days, until the needs of the Department are met. Qualified applicants are encouraged to apply immediately.

ORANGE COUNTY SHERIFF'S DEPARTMENT

The Orange County Sheriff's Department is among the largest in the nation, providing exemplary law enforcement services focused on a collaborative, dedicated and innovative approach to public safety.

Our nearly 4,000 sworn and professional staff are committed to serving the needs of Orange County through six organizational Commands comprised of 23 Divisions. Together, these Commands and Divisions provide services including land, air and sea-based patrol, custody operations, investigative services, emergency management, coroner services, forensics and specialty operations, among an extensive list of other public safety services.

Click here for more information on Technology Division.

Click here for more information on the County of Orange.

THE OPPORTUNITY

Technology Division has an excellent opportunity for a Sr. IT Security Administrator who will be responsible for supervising a team of security analysts who ensures the entire security of the O.C. Sheriffs network; preventing and mitigating malicious attacks against the departments network infrastructure, ensuring the network complies with CJIS (Criminal Justice Information System) requirements, administrating security controls to enforce our security policies, and providing security awareness training to employees.

Responsibilities and duties for this position include, but are not limited to, the following:

• Monitor security telemetry; validate and prioritize alerts; investigate suspected compromise; contain, eradicate, and coordinate recovery; preserve evidence; and document incidents in the approved case-management and ServiceNow workflows.
• Administer and tune enterprise security platforms, including Palo Alto XSIAM/XDR, endpoint controls, security integrations, email-security tooling, logging pipelines, detection rules, dashboards, and automated response playbooks.
• Conduct vulnerability, exposure, and risk management: assess findings, validate exploitability and business impact, assign remediation priorities, coordinate corrective actions, verify closure, and report residual risk.
• Engineer and support identity-security controls for Active Directory and Microsoft Entra ID, including privileged access, PIM, MFA, conditional access, service accounts, guest access, and least-privilege reviews.
• Evaluate and document compliance with CJIS/CLETS, NIST, ISO, PCI, HIPAA, County policy, and applicable retention requirements; support audits, evidence requests, control testing, exceptions, and corrective-action plans.
• Provide security architecture and engineering review for infrastructure, cloud, application, network, remote-access, and third-party initiatives; define controls and securely integrate new technologies without disrupting public-safety operations.
• Develop and maintain security standards, procedures, runbooks, knowledge articles, asset/control documentation, metrics, risk registers, and executive or operational reports; perform work through approved change-management processes.
• Partner with Network, Server/Storage, Applications, Service Desk, executives, County stakeholders, law-enforcement agencies, and vendors to resolve security issues, improve awareness, and coordinate enterprise remediation.
• Manage vendor and agency security coordination, including technical due diligence, access requirements, support escalations, product evaluations, incident communications, and validation of contractual security commitments.
• Maintain professional readiness through threat research, product training, exercises, and knowledge transfer; participate in after-hours incident response, maintenance, and on-call coverage when assigned.

DESIRABLE QUALIFICATIONS

The ideal incumbent would have progressively responsible experience administering enterprise security technologies; analyzing endpoint, identity, network, email, and cloud telemetry; investigating and documenting incidents; managing vulnerabilities and remediation; and applying risk-based security controls. The person should understand Active Directory and Entra ID, networking and firewall concepts, Windows/Linux and cloud fundamentals, scripting or automation, change management, evidence handling, and security frameworks. Strong analytical writing, customer service, teamwork, discretion, and the ability to explain risk to technical and executive audiences are essential. OCSD-specific systems, procedures, and agency relationships can be learned through normal onboarding; advanced incident response and threat investigation; administration of SIEM/XDR/SOAR and endpoint controls (Palo Alto XSIAM/XDR experience is especially relevant); identity and privileged-access security; vulnerability and exposure management; cloud and network security; detection engineering and automation; and documented experience applying CJIS, NIST, ISO, or comparable control frameworks. The candidate should demonstrate sound independent judgment, calm incident leadership, concise documentation, cross-team influence, and respect for change control and public-sector accountability.

MINIMUM QUALIFICATIONS

Click here to learn more about the Sr. IT Security Administrator minimum qualifications.

Education and Experience

College level College level education or training directly related to the competencies and attributes required of the position may be substituted for up to one year of the required experience at the rate of three semester units or the equivalent, equaling one month of experience and one hour of training equaling one hour of experience. College level education or training beyond a bachelors degree, which is directly related to the competencies and attributes required of the position, may be substituted for up to an additional year of required experience at the same rate identified above.

Three years performing security administration at a level that is comparable to the County of Orange classification of IT Security Administrator II.

License/Certification

Depending upon assignment, some positions in this class may require possession of a valid California drivers license, Class C or higher. Depending upon assignment, demonstrated professional level competency and/or certification pertaining to the information technologies used by the County may be required. Certifications such as CISSP and SSCP and may be required.

SPECIAL QUALIFICATIONS

Applicants must not have been convicted of a felony or be on any form of probation and must pass an extensive background investigation to the satisfaction of the Orange County Sheriff-Coroner. Background screening includes completing of a Personal History Form, interview with a background investigator, fingerprinting and may include a polygraph test. Some of the areas considered in the background screening include prior convictions, traffic violations, drug use and credit problems, employment history, professional references and education verification (i.e. degree, license, or official transcripts). Foreign degrees require an evaluation of U.S. equivalency by an agency that is a member of the National Association of Credentials Evaluation Services (N.A.C.E.S.).

PHYSICAL, MENTAL AND ENVIRONMENTAL REQUIREMENTS

The County of Orange is committed to providing a means for applicants who may have a disability to identify areas in which they may request a reasonable accommodation. The following is a description of the physical and mental abilities, which are customarily required to perform the essential job functions of this position. Applicants are encouraged to contact the recruiter listed for any questions or to request an accommodation during the testing/selection process.

Physical and Mental Requirements:

Frequent standing or sitting for extended periods; frequent walking; occasional driving may be required, depending upon assignment; infrequent pushing/pulling; infrequent bending, kneeling, squatting and crawling; infrequent lifting up to 25 pounds; constant use of good overall vision for reading/close up work; infrequent use of color perception and occasional eye/hand coordination; frequent repetitive motion from writing and using a computer keyboard; occasional grasping, holding and reaching; frequent hearing/talking to others on the telephone and in person; frequent decision making and concentration; occasional public contact; occasional working alone. Additional physical/mental requirements or frequencies may be required, depending upon assignment.

Environmental and Working Conditions:

Work is typically performed in an indoor office environment, but occasionally requires travel to other locations. Work environments may include high levels of noise, dust and/or unpleasant odors. Occasional early morning, evening, holiday and/or weekend work may be required.

RECRUITMENT PROCESS

Sheriff Human Resources will screen all application materials to identify qualified applicants. After screening, qualified applicants will be referred to the next step and notified of all further procedures applicable to their status in the competition.

Application Screening (Refer/Non-Refer)

Applications and supplemental responses will be screened for qualifications that are highly desirable and most needed to successfully perform the duties of this job. Only those applicants that meet the qualifications as listed in the job bulletin will be referred to the next step.

Application Appraisal Panel | AAP (Weighted 100%)

An Application Appraisal Panel (AAP) of job knowledge experts will thoroughly screen and evaluate the application, and supplemental questionnaire for job knowledge, competencies, and related experience described above. Only the most qualified candidates will advance to the next step in the recruitment process or will be placed on the eligible list.

Structured Oral Interview | SOI (Weighted 100%)

The Structured Oral Interview is a timed assessment. Applicants will provide answers to job-related questions, which will be rated by a panel of subject matter experts using standardized evaluation criteria. Only the most qualified candidates will move forward to the next step in the recruitment process or will be placed on the eligible list.

Eligible List

Once the assessment has been completed, Sheriff Human Resources will establish an eligible list of candidates. Candidates placed on the eligible list may be referred to a selection interview to be considered for present and future vacancies.

Based on the Countys needs, the selection procedures listed above may be modified. All candidates will be notified of any changes in the selection procedures.

Veterans Employment Preference

The County is committed to providing a mechanism to give preferential consideration in the employment process to veterans and their eligible spouses and will provide eligible participants the opportunity to receive interviews in the selection process for employment and paid internship openings. Please click here to review the policy.

ADDITIONAL INFORMATION

REASONABLE ACCOMMODATION

The County of Orange is committed to providing reasonable accommodations to qualified individuals with disabilities. Individuals who require a reasonable accommodation during the application or selection process should notify the recruiter listed on the job posting as soon as possible. Documentation supporting the accommodation request may be required.

EMAIL NOTIFICATION

Email is the primary form of notification during the recruitment process. Please ensure your correct email address is included in our application and use only one email account.

NOTE: User accounts are established for one person only and should not be shared with another person. Multiple applications with multiple users may jeopardize your status in the recruitment process for any positions for which you apply. Candidates will be notified regarding their status as the recruitment proceeds via email through the GovernmentJobs.com site. Please check your email folders, including spam/junk folders, and/or accept emails ending with "governmentjobs.com" and "ocgov.com." If your email address should change, please update your profile at www.governmentjobs.com.

FREQUENTLY ASKED QUESTIONS

Click here for additional Frequently Asked Questions.

For specific information pertaining to this recruitment, contact Mary Cortez-Valadez at mcortez-valadez@ocsheriff.gov or 714.834.5834.

EEO INFORMATION

Orange County, as an equal employment opportunity employer, encourages applicants from diverse backgrounds to apply.

Please note that Extra Help employees are not eligible for the benefits listed.

Please go to the following link to find out more about Defined Benefit Pensions and OCERS Plan Types/Benefits.

http://www.ocers.org/active-member-information

01

INSTRUCTIONS: You are required to provide full and complete responses to the questions asked. The information you provide will be used to determine your level of expertise as well as a scoring device, so please be descriptive in your responses. Failure to do so will result in an automatic "disqualification." Incomplete information will result in a lower score. If you do not have the experience in an area, please answer "N/A". Statements such as "see application" or "see resume" will not be accepted in lieu of a response. All employers referenced on this questionnaire must be listed in your application. Do you understand these instructions?

I have read and understand the importance of answering the following questions.

• Yes
• No

02

Please select the option that best describes your qualifications.

NOTE: College level education or training directly related to the competencies and attributes required of the position may be substituted for up to one year of the required experience at the rate of three semester units or the equivalent, equaling one month of experience and one hour of training equaling one hour of experience. College level education or training beyond a bachelors degree, which is directly related to the competencies and attributes required of the position, may be substituted for up to an additional year of required experience at the same rate identified above.

• Three (3) years of experience performing security administration at a level that is comparable to the County of Orange classification of IT Security Administrator II.
• Two (2) years of experience performing security administration at a level that is comparable to the County of Orange classification of IT Security Administrator II AND related college level education or training
• One (1) year of experience performing security administration at a level that is comparable to the County of Orange classification of IT Security Administrator II AND related college-level education, or training beyond a bachelor's degree
• None of the above

03

If you possess education (college level or higher, i.e., bachelors, masters, etc.) or training directly related to the competencies and attributes, please provide the field of study you obtained your degree and/or training in. If this does not apply to you, please write "no experience" or "N/A". NOTE: If you are substituting some experience with education, a copy of your unofficial transcripts must be attached to your application for verification at the time you apply.

04

Please describe your hands-on experience working in a security focused information technology role. Examples may include deploying or improving SIEM, SOAR, XDR, identity security, privileged access, email security, cloud security, network security, data protection, cyber-recovery, or security automation. Clearly identify the information security tools you have used and indicate and your level of proficiency with each. If this does not apply to you, please write "no experience" or "N/A". *QUESTION 6

05

Describe your experience interpreting cybersecurity requirements based on laws, regulations, policies, or recognized security frameworks. If this does not apply to you, please write "no experience" or "N/A".

06

Please select any valid certifications you currently possess. Attach a copy of your certification(s) to your application.

• Certified Information Systems Security Professional (CISSP)
• Certified Information Systems Auditor (CISA)
• Systems Security Certified Practitioner (SSCP)
• CompTIA Security
• Global Information Assurance Certification (GIAC) Security Essentials (GSEC)
• Microsoft Certified Solutions Expert (MCSE)
• Cisco Certified Network Associate (CCNA)
• None of the Above
• Other

Required Question

Employer County of Orange

Address 400 W CIVIC CENTER DRIVE

Santa Ana, California, 92701

Phone 714-834-2555

Website https://hrs.oc.gov