IT Security Infrastructure Engineer II / III / Senior

Summary

Our present and future success depends on the creative and dedicated people of our company who demonstrate the principles outlined in the APS Promise: Design for Tomorrow, Empower Each Other and Succeed Together.

IT Security Infrastructure Engineer II / III / Senior

Are you a hands‑on security engineer who thrives at the intersection of physical security and technology? At APS, you’ll play a key role in protecting critical infrastructure that powers communities across Arizona. This role is focused on designing and supporting advanced physical security systems—including access control and video management—ensuring they are secure, reliable, and built to scale.

You’ll work on systems that directly impact real‑world operations, from securing facilities across the state to supporting incident response and system resilience. If you’re someone who enjoys solving complex problems, working in the field, and seeing the tangible impact of your work, this is a unique opportunity to do just that.

What You’ll Do

• Design, implement, and support enterprise‑level physical security systems, including access control (PACS) and video surveillance (CCTV).
• Lead and support system upgrades, installations, and migrations across security platforms, servers, and databases.
• Troubleshoot and resolve complex security system issues, both remotely and in the field, minimizing downtime and operational risk.
• Partner with cybersecurity, engineering, network, and field teams to ensure systems are secure, integrated, and performing reliably.
• Support compliance efforts, including documentation, system testing, and maintaining security records aligned to regulatory standards (e.g., CIP).
• Validate network connectivity and performance for security systems to ensure seamless operation across locations.
• Coordinate with vendors and internal stakeholders to deliver high‑quality installations and system enhancements.
• Evaluate new technologies and continuously improve system performance, scalability, and security posture.

What You Bring

• Hands‑on experience with physical security systems such as access control, video management, and supporting infrastructure.
• Experience working with security system servers, hardware deployments, and database or platform migrations.
• Strong troubleshooting skills with the ability to diagnose and resolve issues across integrated systems.
• Familiarity with compliance‑driven environments and structured documentation practices.
• Experience working across cross‑functional teams, including cybersecurity, network, and field operations.
• Comfort working in both technical and field environments, supporting systems at multiple locations.
• A proactive mindset with a focus on ownership, reliability, and continuous improvement.

Minimum Requirements

IT Security Infrastructure Engineer II

• Bachelor’s degree in Information Technology or related field.
• PLUS two (2) years of prior relevant experience or equivalent combination of education and directly related experience.
• Requires working technical knowledge gained through experience within a job area or system.

IT Security Infrastructure Engineer III

• Bachelor’s degree in Information Technology or related field.
• PLUS five (5) years of prior relevant experience or equivalent combination of education and directly related experience.
• Requires strong technical knowledge within a job area or system and basic knowledge across related technical areas.

IT Security Infrastructure Engineer, Senior

• Bachelor’s degree in Information Technology or related field.
• PLUS seven (7) years of prior relevant experience or equivalent combination of education and directly related experience.
• Requires in‑depth level of technical knowledge within a job area and working knowledge of other technical areas.

Preferred Special Skills, Knowledge or Qualifications

• Knowledge of all infrastructure technologies: compute, storage, networking, physical infrastructure, software, commercial off‑the‑shelf (COTS) and open‑source packages and solutions, virtual and cloud including IaaS, PaaS and SaaS; infrastructure management tools and monitoring tools; solution sizing for hardware/software platforms; industry standard security requirements and designs.
• Troubleshooting; installing and repairing PC hardware and software; advanced design, maintenance and repair of servers; applying creative solutions to business problems to ensure business needs are most effectively met; advanced information system configuration management.
• Ability to develop and write technical documentation; evaluate and test emerging technologies.

Major Accountabilities

• Performs the most complex duties of the technical infrastructure team.
• Leads architecture, design, analysis, implementation, and operations of infrastructure.
• Develops, recommends, and implements complex infrastructure solutions.
• Leads the planning, designing, and execution of testing.
• Ensures infrastructure scalability and security within the organization.
• Reviews plans to manage the frequency of support package/patch application.
• Applies highly developed specialized knowledge and skills in infrastructure to define improvements for increased reliability and performance.
• Evaluates and tests emerging technologies.
• Recognized as the most experienced and knowledgeable infrastructure engineer within the organization.
• Provides guidance, coaching, and training to other employees within the field of infrastructure engineering.
• Typically responsible for managing major/complex projects across the enterprise at this level, involving delegation of work and review of infrastructure engineering projects.

Export Compliance / EEO Statement

This position may require access to and/or use of information subject to control under the Department of Energy's Part 810 Regulations (10 CFR Part 810), the Export Administration Regulations (EAR) (15 CFR Parts 730 through 774), or the International Traffic in Arms Regulations (ITAR) (22 CFR Chapter I, Subchapter M Part 120) (collectively, ’U.S. Export Control Laws’). Therefore, some positions may require applicants to be a U.S. person, which is defined as a U.S. Citizen, a U.S. Lawful Permanent Resident (i.e. ’Green Card Holder’), a Political Asylee, or a Refugee under the U.S. Export Control Laws. All applicants will be required to confirm their U.S. person or non‑U.S. person status. All information collected in this regard will only be used to ensure compliance with U.S. Export Control Laws, and will be used in full compliance with all applicable laws prohibiting discrimination on the basis of national origin and other factors. For positions at Palo Verde Nuclear Generating Stations (PVNGS) all openings will require applicants to be a U.S. person.

Pinnacle West Capital Corporation and its subsidiaries and affiliates ('Pinnacle West') maintain a continuing policy of nondiscrimination in employment. It is our policy to provide equal opportunity in all phases of the employment process and in compliance with applicable federal, state, and local laws and regulations. This policy of nondiscrimination shall include, but not be limited to, recruiting, hiring, promoting, compensating, reassigning, demoting, transferring, laying off, recalling, terminating employment, and training for all positions without regard to race, color, religion, disability, age, national origin, gender, gender identity, sexual orientation, marital status, protected veteran status, or any other classification or characteristic protected by law.

For more information on applicable equal employment regulations, please refer to EEO is the Law poster. Federal law requires all employers to verify the identity and employment eligibility of every person hired in the United States, refer to E-Verify poster. View the employee rights and responsibilities under the Family and Medical Leave Act (FMLA). Arizona Public Service is a smoke‑free workplace.

CIP Requirement

This position requires Critical Infrastructure Protection (CIP) access consistent with North American Electric Reliability Corporation (NERC) standards. The applicant considered for this role will be required to obtain and maintain CIP access for the duration of employment in this position. A full seven (7) year criminal history will be obtained through the pre‑employment background check process (or, for current employees, through supplemental background check process) to fulfill the CIP access requirements. In addition, this position requires an additional background check every seven years to maintain access.

Onsite

Requires work to be performed in the field and/or at an APS facility. Depending on the responsibilities of the role, this may include, but is not limited to, working at a power plant, job site, or in the community.

Other Requirements

• Employees are expected to reside in Arizona (or New Mexico for Four Corners‑based employees).
• Role types are subject to change based on business need.