[Hiring] Senior Hybrid-Cloud System Engineer (Security) @Port of Portland

Role Description

The Senior Hybrid-Cloud System Engineer (Security) ensures the Port’s hybrid IT infrastructure is secure, resilient, and scalable by leading the design, integration, and deployment of modern cloud and on-premises technologies. This role serves as a technical security expert, partnering closely with Information Security to translate emerging threats and standards into effective operational controls.

As a Systems Engineer on our IT Infrastructure Operations team, you’ll be at the center of this transformation. You’ll design and support the foundational identity, network, cloud, and security services that power our new ERP ecosystem—ensuring stability, security, and long-term sustainability.

Essential Job Duties:

• Engineer secure, scalable, and operationalized cloud and on-prem infrastructure solutions using modern architectural frameworks and automation-first strategies.
• Develop, maintain, and optimize CI/CD pipelines with integrated security scanning, compliance validation, and deployment automation.
• Implement and manage infrastructure-as-code workflows and automation (Terraform, CloudFormation, Ansible, GitHub Actions, Jenkins).
• Design and administer application-layer, network, and cloud security controls, including firewalls, IAM policies, segmentation, and monitoring.
• Integrate complex systems and services with automated scanning, policy enforcement, and security instrumentation.
• Lead the design and implementation of secure hybrid-cloud architecture across AWS, Azure, and on-prem systems.
• Partner with the Information Security team to translate organizational security requirements into engineered controls, secure deployment patterns, and automated policy enforcement.
• Develop and maintain secure configuration standards, reference architectures, and runbooks for infrastructure and application-layer security technologies.
• Evaluate emerging technologies (AI, Kubernetes orchestration, service mesh architectures, GitOps workflows, and advanced cloud constructs) to drive innovation and organizational transformation.
• Respond as primary security engineer to hybrid-infrastructure security events, outages, and complex incident investigations.
• Conduct root cause analysis, implement containment and remediation actions, and lead preventative hardening efforts across multi-cloud and on-prem systems.
• Support internal, external security, and operational audits by providing technical documentation, system evidence, compliance reporting, and performing systems remediation activities.

Qualifications

• Five (5) + years of progressive experience in Administration and/or engineering of cloud and hybrid infrastructure server environments.
• Bachelor’s Degree – Computer Science or related field, or a combination of related education, industry certification, and demonstrated experience.
• Ability to pass a criminal history records check to allow entry to secure airport areas (Grey Badge).
• CJIS background clearance (due to access to secure information at the airport).
• Clear credit check (due to access to sensitive financial information).

Requirements

• Hybrid Cloud & Infrastructure Concepts: Architecture and operations across AWS, Azure, and on-premises platforms; virtualization; operating systems; enterprise identity systems; core infrastructure services.
• Security Frameworks & Principles: NIST CSF, CIS Controls, zero-trust architecture; IAM and PAM concepts; encryption, PKI, secrets management; policy-based security models.
• DevSecOps & Automation Foundations: CI/CD concepts, infrastructure-as-code methodologies, secure coding practices, GitOps principles, automated compliance validation.
• Architect and deliver secure hybrid-cloud solutions across AWS, Azure, and on-prem environments.
• Implement engineered security controls, secure deployment pipelines, and automated policy enforcement.
• Troubleshoot and resolve complex incidents spanning cloud, network, compute, and application layers.

Benefits

• Limited-duration role lasting approximately 24 – 36 months to assist the Port of Portland with an ERP implementation.
• The role may be lengthened or shortened based on business need.