Division of Technology Services (DTS)
1400 West Washington Street Phoenix Arizona 85007

Salary: $83500 - $93579

Grade: 26

Closing Date: September 14 2025

Would you like to be part of an amazing team that helps Arizonans thrive At the Department of Economic Security (DES) we strengthen individuals families and communities for a better quality of life. DES is looking for individuals who are committed to service community and teamwork. To learn more about DES please visit ; or click on the link hereto view Our DES video. Come Join the DES Team!

DES is seeking an experienced and highly motivated individual to join our team as a Firewall Engineer. This position is critical to build configure and administer Information security hardware and software needed to secure the network from internal and external threats. These tools consist of firewalls VPN servers encryption systems authentication vulnerability assessment tools data loss prevention tools anti-virus and malware protection tools intrusion prevention tools web filtering tools network access controls and secure information and event management tools. As the agency Implements Network Access Control and a segmented network architecture this position acts as an engineer in acquiring configuring testing and administering the tools. While the agency transitions to this more secure model of network security it also is increasing its use of vulnerability detection antivirus malware protection Intrusion detection web-filtering and anomaly reporting software.

This position may offer the ability to work remotely within Arizona based upon the departments business needs and continual meeting of expected performance measures.

The State of Arizona strives for a work culture that affords flexibility autonomy and trust. Across our many agencies boards commissions many State employees participate in the States Remote Work Program and are able to work remotely in their homes in offices and in hoteling spaces. All work including remote work should be performed within Arizona unless an exception is properly authorized in advance.

Essential Duties and Responsibilities include but are not limited to:

• Operation of information Security hardware and software (tools) to secure the network from external threats and protect Information within the network from unauthorized disclosure these tools include network access control encryption virtual private networks secure desktop as a service anti-virus malware protection vulnerability assessment intrusion protection perimeter protection data loss prevention and web filtering.
• Respond to reports of network threats and engineer solutions to prevent future threats. Whitelist/Blacklisting of ips at a moments notice
• Provide engineering support to the policy team and the change management process

Knowledge of:

• NIST Standard and associated controls
• State of the art implementations of NIST 800-53 standard security controls on various computer systems including mainframe systems
• Firewalls
• Scripting languages
• Computer networking systems and technologies including routing and switching
• DES DOA/ASET and US Government public auditing policies standards and procedures
• UNIX IDS Access Control Solutions SSL VPN IPSec TCP/IP DNS and web services and their roles in security architecture

Skills In:

• Standard office software email Microsoft Project SharePoint
• Specialized software at DES - Service Desk AD Manager Plus SharePoint Deslgn and various IBM mainframe administration applications
• Configuration of computer security applications such as McAfee EPO Nessus Sourcefire WebSense administration console and standard SIEM products
• Configuration Network Access Control products and router configuration
• Configuration of and administration of firewalls
• Interpretation of firewall and network device logs

Ability to:

• Perform control reviews on systems development operation programming control and security procedures and standards
• Review system backup disaster recovery and maintenance procedures
• Communicate with and understand the requirements of professional staff in area of specialty
• Create compose and edit written materials
• Test and interpret emerging security and network technologies
• Quickly interpret assess and react to network intrusions

This ideal candidate for this position will have:

• Advanced knowledge of Cisco Firewalls
• Previous intrusion detection and web filtering experience
• ACL experience / VPN experience / Cisco route/switch experience
• Certified Information Security Systems professional preferred

• This position may require driving or the use of a vehicle as an essential function of the job to conduct State business then the following requirements apply: Drivers License Requirements. Any employee operating a motor vehicle on State business must possess and retain a current valid class-appropriate drivers license complete all required training and successfully pass all necessary drivers license record checks. The license must be current unexpired and neither revoked nor suspended. Employees who drive on state business are subject to drivers license record checks must maintain acceptable driving records and must complete all required driver training. An employee who operates a personally owned vehicle on state business shall maintain the statutorily required liability insurance (see Arizona Administrative Code (A.A.C.) R.11).
• Successfully pass background and reference checks; employment is contingent upon completion of the above-mentioned process and the agencys ability to reasonably accommodate any restrictions.
• All newly hired State employees are subject to and must successfully complete the Electronic Employment Eligibility Verification Program (E-Verify).
• Employee shall obtain and maintain a valid Level One fingerprint clearance card that meets DES requirements for a Level One card pursuant to Arizona Revised Statute 41-1969.
• Bachelors degree OR 5 or more years of experience in information security analysis and engineering (or equivalent experience)

The Arizona Department of Economic Security offers a comprehensive benefits package to include:

• Affordable medical dental life and short-term disability insurance plans
• Participation in the Arizona State Retirement System (ASRS) and long-term disability plans
• 10 paid holidays per year
• Vacation time accrued at 4.00 hours bi-weekly for the first 3 years
• Paid Parental Leave-Up to 12 weeks per year paid leave for newborn or newly-placed foster/adopted child (pilot program).
• Sick time accrued at 3.70 hours bi-weekly
• Deferred compensation plan
• Wellness plans
• Tuition Reimbursement
• Stipend Opportunities
• Infant at Work Program
• Rideshare and Public Transit Subsidy
• Career Advancement & Employee Development Opportunities
• Flexible schedules to create a work/life balance

By providing the option of a full-time or part-time remote work schedule employees enjoy improved work/life balance report higher job satisfaction and are more productive. Remote work is a management option and not an employee entitlement or right. An agency may terminate a remote work agreement at its discretion.

Learn more about the Paid Parental Leave pilot programhere. For a complete list of benefits provided by The State of Arizona please visit our benefits page

State employees are required to participate in the Arizona State Retirement System (ASRS) the State sponsored retirement contribution plan and the Long-Term Disability (LTD) program after a 27-week waiting period. The ASRS defined benefit plan provides for life-long income upon retirement. You will also have the option to participate in a voluntary deferred compensation program to take advantage of tax-deferred retirement investments.

On or shortly after your first day of work you will be provided with additional information about the available insurance plans enrollment instructions submission deadlines and effective dates.

For questions about this career opportunity please contact us at or

The State of Arizona is an Equal Opportunity/Reasonable Accommodation Employer. Persons with a disability may request a reasonable accommodation such as a sign language interpreter or an alternative format by contacting or Requests should be made as early as possible to allow sufficient time to arrange the accommodation.