Security Configuration Engineer

Job Title: Security Configuration Engineer

Job Requisition ID: 51193 

Closing Date: 11/12/2025

Salary: $7,787 monthly

Work Location: Springfield, IL

Union Position: Yes

Work authorization: US work authorization required at time of application. No sponsorship available. Not eligible for STEM OPT. Positions are W2 only and cannot be converted to a contract position. 

Questions? Email doit.recruitment@illinois.gov

Transcripts are required for consideration.

Are you looking for a rewarding career with an organization that values their staff? The Department of Innovation & Technology (DoIT) is seeking to hire qualified candidates with the opportunity to work in a dynamic, creative thinking, problem solving environment. 

This position serves as a Security Configuration Engineer coordinating and conducting highly complex, technical support and delivery of network security concepts, protocols and methodologies. 

In this role, you will test, implement and deploy enterprise/infrastructure hardware and software supporting network defense. 

Additionally, you will monitor the network for unauthorized activity or threats to network security including email, Voice-over-IP (VoIP) and video traffic. 

If you possess these knowledges, skills, abilities, and experience, we invite you to apply for this position to join the DoIT Team!

As a State of Illinois employee, you receive a comprehensive benefits package including:

• Competitive Group Insurance benefits including health, life, dental and vision plans
• Flexible work schedules (when available and dependent upon position)
• 10 -25 days of paid vacation time annually (10 days for first year of state employment)
• 12 days of paid sick time annually which carryover year to year
• 3 paid personal business days per year
• 13-14 paid holidays per year dependent on election years
• 12 weeks of paid parental leave
• Pension plan through the State Employees Retirement System
• Deferred Compensation Program – voluntary supplemental retirement plan
• Optional pre-tax programs -Medical Care Assistance Plan (MCAP) & Dependent Care Assistant Plan (DCAP)
• Tuition Reimbursement Program and Federal Public Service Loan Forgiveness Program eligibility

Essential Functions

• Under administrative direction, serves as a Security Configuration Engineer for the Department of Innovation & Technology (DoIT), conducting highly complex technical support and delivery of network security concepts, protocols, and methodologies through identifying, analyzing, and reporting events or potential events posing a threat to State of Illinois information, information systems, and networks.
• Tests, implements, and deploys enterprise/infrastructure hardware and software supporting network defense and plans and implements web application defense measures including protections against buffer overflows, SQL injection attacks and similar malicious code.
• Monitors the network for unauthorized activity or threats to network security including email, Voice-over-IP (VoIP), and video traffic and coordinates with enterprise-wide computer networks to identify anomalous activity and potential threats to network resources.
• Conducts tests of information assurance (IA) safeguards in accordance with established test plans and procedures and examines network topologies to understand data flows through the network.
• Keeps abreast of industry best practice, standards, approaches, tools and techniques as propagated by International Standards Organization, Information Technology Infrastructures Library, National Institute of Standards and Technology and other governing and certification bodies such as ISC2, Information Systems Audit and Control Association, IRS Publication 1075, CJIS Security Policy, HIPAA and Payment Card Industry Data Security Standards (PCI-DSS), by continuing education through online training platforms, attending meetings, training sessions, seminars and conferences to increase familiarity with and remain current on products, vendors, techniques and procedures.
• Performs other duties as required or assigned which are reasonably within the scope of the duties enumerated above.

Minimum Qualifications

• Requires knowledge, skill, and mental development equivalent to four (4) years of college with course work in computer science or directly related fields.
• Requires three (3) years of professional experience in System Services or a related Information Technology field.

Preferred Qualifications

• Three (3) years of professional experience in network security, network engineering, and security engineering, including the design, implementation, or maintenance of secure network infrastructures across enterprise environments.
• Three (3) years of professional experience in configuration and information management, ensuring the integrity, availability, and confidentiality of systems through rigorous configuration control, documentation, or compliance with industry standards and frameworks.
• Three (3) years of professional experience leading and executing highly complex technical initiatives, including delivering advanced network security solutions, protocols, and methodologies in alignment with organizational and regulatory requirements.
• Three (3) years of professional experience deploying and integrating enterprise-level hardware and software solutions, with a focus on proactive network defense, vulnerability mitigation, and threat detection across diverse IT environments.
• Three (3) years of professional information security experience identifying, analyzing, and responding to anomalous network activity and security threats, including the utilization of enterprise-level monitoring tools and methodologies (e.g. Transmission Control Protocol/Internet Protocol (TCP/IP), Domain Name System (DNS), Dynamic Host Configuration Protocol (DHCP), Voice over Internet Protocol (VoIP) or other similar monitoring tools/methodologies) to detect, investigate, and mitigate unauthorized access or malicious behavior across complex network environments.
• Ability to analyze data logically and exercise sound judgement in defining and evaluating problems of an operational or procedural nature.
• Developed verbal and written communication skills to present technical information clearly and precisely to diverse audiences, including business owners, development teams, agency executives, and to others.
• Ability to develop and maintain cooperative and effective working relationships with staff, managers, executives, internal/external stakeholders, development teams, and business owners fostering collaboration in resolving sensitive technical or security issues and supporting team members or project staff.
• Certification(s) in one or more of the following relevant to Information Security such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or EC-Council Certified Ethical Hacker (CEH).
• Certification(s) in one or more of the following relevant infrastructure technologies such as: Cisco Certified Internetwork Expert (CCIE), Cisco Certified Network Professional (CCNP), Cisco Certified Network Associate (CCNA), Virtual Machine Component Protection (VMCP) or Microsoft Certified Solutions Expert (MSCE).

Conditions of Employment

NOTE: Applicants must possess the ability to meet ALL of the following conditions of employment, with or without reasonable accommodation, to be considered for this position.

• Requires the ability to verify identity
• Requires employment authorization to accept permanent full-time position with the State of Illinois
• Requires the ability to pass a position specific, agency required background check and requires self-disclosure of criminal history
• Requires the ability to travel in the performance of duties.
• Requires the ability to work outside of normal hours to meet deadlines. 
• Requires the ability to work overtime including scheduled, unscheduled, short notice, evening, weekends, and holidays.
• Requires the ability to use agency supplied equipment such as laptop, personal computer, work cell phone, etc.
• Requires the ability to attend seminars, conferences, and training to remain current on methods, tools, ideologies or other industry related topics relevant to job duties.
• Requires the ability to lift and carry objects or equipment weighing up to 20 pounds. This is considered light work as defined by the U.S. Department of Labor (20 CFR 404.1567(b)). Light work involves lifting no more than 20 pounds at a time with frequent lifting or carrying of objects weighing up to 10 pounds. This job may require a good deal of walking or standing or involves sitting most of the time with some pushing and pulling of arm or leg controls.
• The conditions of employment listed are incorporated and/or related to any duties included in the position description.