Lead Infrastructure Security Engineer

Job Description and Duties

This positing is being readvertised. If you have previously applied, you do not need to reapply for consideration.

Why join CalHR?
The California Department of Human Resources (CalHR) was named a 2026 Gallup Exceptional Workplace Award winner for strengths development, a national recognition of organizations that build cultures helping people do their best work. This honor reflects our department-wide investment in a strengths-based workplace that supports growth, leadership and a stronger employee experience. Join CalHR to work in an environment that prioritizes professional development and public service.

The California Department of Human Resources (CalHR) is the pillar of human resources management for all state employees. Our success is made possible by the hard work of more than 400 CalHR team members who serve as trusted advisors to our strategic partners and the public. If you are interested in providing exceptional human resource services and guidance, CalHR is the place for you. By joining our team, you’ll have the opportunity to make a meaningful impact while working alongside passionate professionals. Get to know us more here!

CalHR employees are excluded from bargaining and are eligible to receive enhanced benefits, such as CoBen benefit allowance, employer paid life insurance, additional vacation/annual leave, and are not subject to State Disability Insurance payroll withholding.

This is an exciting opportunity to join our diverse team in the following role. If you are interested in joining our team, apply today!

About this Role
Under the general direction of the Information Technology Manager I, Department of Human Resources (CalHR), Infrastructure Unit, the Information Technology Specialist II serves as a senior technical resource responsible for designing, implementing, securing, and maintaining enterprise infrastructure supporting CalHR's business operations. The incumbent provides advanced technical expertise across cloud environments, servers, storage, networking, directory services, and infrastructure security.

How to Apply
Information about applying for a state job can be found here: Three Steps to a State Job . If you’re interested in exploring additional job opportunities at CalHR, please reach out to our recruitment team at View email address on us.fitly.work . We’d love to hear from you!

You will find additional information about the job in the .

Working Conditions

This position may be eligible for a telework opportunity in accordance with departmental policies and operational needs. Employees are currently required to work in-person at least four (4) days per week in alignment with Executive Order N-22-25. Additional in-office days may be required based on operational needs.
Personal Leave Program: Effective July 1, 2025, state employees are subject to temporary salary reductions ranging from 2% to 4.62% in exchange for Personal Leave Program (PLP) hours. Please note that the salary ranges listed in this Job Control may not reflect these reductions associated with the 2025 Personal Leave Program. Please follow the link for more information regarding the 2025 Personal Leave program: Merit Salary Adjustment (MSA): Every seven (7) - twelve (12) months depending on the position and based on performance, employees may receive a 5% salary increase until they reach the maximum salary of the position.

Special Requirements

All interested applicants are required to submit a Statement of Qualifications (SOQ). Please provide direct responses to each of the numbered items listed below. Applicants must number and include the full text of the SOQ items in their response. Please include specific examples of your education, training, and/or experience. SOQs should be limited to a maximum of two (2) pages, single-spaced, twelve-point Arial font.

1. Describe your hands-on experience designing, implementing, and hardening complex server infrastructure across hybrid environments (e.g., Windows Server, Linux, VMware, and Microsoft Azure.)

2. Please detail your technical expertise in managing enterprise storage solutions alongside core server applications (e.g., Active Directory, IIS, Citrix XenApp, or Exchange.)

3. Describe your experience configuring, securing, and maintaining enterprise network infrastructure (e.g., Palo Alto Firewalls, Cisco switching, wireless controllers, or Network Access Control/Forescout.) Additionally, share how you provide technical leadership and mentorship.

Note:  Applicants who do not follow these instructions may be disqualified from the selection process. Cover letters and resumes do not take the place of the SOQ.

For helpful guidance on writing an effective SOQ, please see our Work4CA guide.

Desirable Qualifications

In addition to evaluating each candidate's relative ability, as demonstrated by quality and breadth of experience, the following factors will provide the basis for competitively evaluating each candidate:

• Cloud Security Expertise: Advanced, hands-on experience designing, securing, and managing Microsoft Azure environments, with specific expertise in Cloud Security Posture Management (CSPM), Microsoft Defender for Cloud, Microsoft Sentinel, and Identity and Access Management (IAM/Entra ID)
• Enterprise Infrastructure & Operating Systems: Deep technical knowledge and experience configuring, hardening, and maintaining enterprise-level Windows Server (2016+), Linux, and VMware virtualization environments
• Network & Perimeter Security: Proficiency with configuring, optimizing, and troubleshooting Palo Alto Firewalls, Cisco switches, and Network Access Control (NAC) systems like ForeScout
• Storage Area Networks (SAN): Experience engineering and managing enterprise storage arrays, optimizing Fibre Channel protocols, and implementing storage encryption and data retention policies
• Automation & Orchestration: Strong experience developing advanced automation scripts (e.g., PowerShell, Bash, or Infrastructure as Code) to streamline deployments, patching, and security audits
• Analytical & Problem-Solving Skills: Excellent analytical, critical thinking, and troubleshooting skills, with the ability to resolve complex, high-priority technical issues under pressure
• Professional Dependability & Communication: Exceptional written and verbal communication skills, a strong sense of accountability, and the ability to build collaborative relationships with teammates, stakeholders, and control agencies
• Lead & Mentorship Experience: Demonstrated experience serving as a technical lead, steering complex IT projects, establishing technical standards, and mentoring junior systems engineers and technical staff

• Industry Certifications (Highly Desired): Possession of relevant industry-recognized certifications, such as:
• Certified Information Systems Security Professional (CISSP)
• Certified Cloud Security Professional (CCSP)
• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Palo Alto Networks Certified Network Security Engineer (PCNSE)

Benefits

CalHR ensures that all state employees, retirees and their dependents have access to competitive, quality and affordable benefits. Please visit our new Benefits website at for more information!

Additional Application Information

Using the online application system as specified in the announcement is the preferred method for applying for civil service job opportunities; however, applicants may instead apply by way of U.S. mail, parcel delivery or courier service, or in person, as set forth in this announcement.

• Electronic Submission: Application and any applicable required documents may be submitted electronically through CalCareers account. The application packages must be received electronically by 11:59 p.m. on the final filing date as state on the job vacancy announcement. 
• U.S Postal Service Mail: Application and any applicable required documents may be submitted by mail. The envelope must be postmarked before or on the final filing date as stated on the job vacancy announcement. 

Do not include confidential information such as social security numbers, date of birth, marital status, equal employment opportunity data, examination scores, and LEAP information.

Per CCR 249.3 we may fill additional positions from this recruitment.

Required Application Package Documents

The following items are required to be submitted with your application. Applicants who do not submit the required items timely may not be considered for this job:

• Current version of the State Examination/Employment Application STD Form 678 (when not applying electronically), or the Electronic State Employment Application through your Applicant Account at All Experience and Education relating to the Minimum Qualifications listed on the Classification Specification should be included to demonstrate how you meet the Minimum Qualifications for the position.
• Resume is required and must be included.
• Statement of Qualifications - A Statement of Qualifications (SOQ) is required and must be included. Please see the Special Requirements section for instructions.