CAL-CSIRS System Administrator

1-YEAR BASE TERM WITH POTENTIAL 1-YEAR EXTENSION. WORK WILL BE PERFORMED REMOTELY.

Mandatory Requirements

• At least seven (7) years within the last ten (10) years of professional database administrator experience and a working understanding of relational database relationships.
• At least seven (7) years within the last ten (10) years of professional experience and understanding of compound queries (inner and outer joins).

• At least seven (7) years within the last ten (10) years of professional experience and understanding of eXtensible Markup Language (XML).
• At least seven (7) years within the last ten (10) years of professional experience and understanding of Structured Query Language (SQL) Server Reporting Services (SSRS).
• At least seven (7) years within the last ten (10) years of professional experience and understanding of delimited text files.
• At least seven (7) years within the last ten (10) years of professional experience in change control and configuration management including maintaining change management documentation.
• At least seven (7) years within the last ten (10) years of professional experience administering user accounts and assigning permissionscreate read update and delete (CRUD)and role-based access control (RBAC) for a Governance Risk and Compliance (GRC) platform supporting hundreds of users.
• At least seven (7) years within the last ten (10) years of professional experience working with Governance Risk and Compliance (GRC) platforms (such as CAL-CSIRS RSA Archer ServiceNow or equivalent) including configuration of modules data fields workflows and handlers.
• At least seven (7) years within the last ten (10) years of professional experience administering GRC modules such as Incident Management Security Event Notification (SEN) and Risk Assessment.
• Working knowledge of IT and information security industry trends and best practices.

Desirable Requirements

• Any professional experience conducting risk assessments for an IT environment with business units to support a diverse set of infrastructure and services.
• Working knowledge of the National Institute of Standards and Technology (NIST) Standards the NIST Cybersecurity Framework and NIST Special Publication (SP) 800-53 and other regulatory security standards and frameworks.

• Possession of one or more of the following information technology industry certifications:
• Security Operations & Engineering (Microsoft): Microsoft Security Operations Analyst (SC-200) Azure Security Engineer Associate (AZ-500) Cybersecurity Architect Expert (SC-100) Identity and Access Administrator Associate (SC-300) Azure Administrator Associate (AZ-104) or Security Compliance and Identity Fundamentals (SC-900);
• Governance Risk & Audit: CISM CISSP CISA CRISC or CGRC (Certified in Governance Risk and Compliance / formerly CAP);
• Cloud Security: CCSP (Certified Cloud Security Professional) AWS Certified Solutions Architect or AWS Certified Security Specialty;
• SOC / Blue-Team / Incident Response: Any GIAC certification (e.g. GSEC GCIH GCDA GMON or GCFA) CompTIA Security or CompTIA CySA.
• SIEM / SOAR Platforms: Splunk certifications (e.g. Core Certified Power user or Enterprise Security Certified Admin) or Palo Alto Networks Certified XSIAM Engineer;
• Project & Agile Delivery: PMP PMI-ACP or SAFe Scrum Master (SSM).
• Ten (10) years within the last fifteen (15) years of experience supporting statewide cybersecurity operations and modernization initiatives within a California State agency.
• Ten (10) years within the last fifteen (15) years of experience with Agile/Scrum delivery and tools such as Azure DevOps (ADO).
• Demonstrated leadership experience establishing and leading technical teams and overseeing the delivery of multiple (two or more) enterprise identity and access management (IAM) and cybersecurity initiatives from concept through implementation and ongoing operations including at least one initiative incorporating AI/automation or other emerging technologies. Experience should include cross-functional stakeholder coordination and full-lifecycle delivery at an enterprise or public-sector scale.
• Depth operating a Microsoft-native SOC at scale Sentinel Defender XDR in a multi-tenant / MSSIP or enterprise environment.
• AI/GenAI applied to security operations SOC automation detection engineering or LLM triage.
• Zero Trust and identity governance (IGA) delivery Entra ID Governance SailPoint or Saviynt implementations.
• Security automation / SOAR playbook development (Azure Logic Apps XSIAM Splunk SOAR).
• Public-sector compliance depth StateRAMP/FedRAMP CJIS or California SAM/SIMM 5300 experience.
• Knowledge transfer / mentoring of State staff.

Applications that do not complete the Prescreen Survey will not be considered.

Anvaya Solutions Inc. is an equal opportunity employer. All employment decisions including hiring promotions and compensation are made without regard to race color religion sex national origin or any other protected characteristic. We are committed to a merit-based workplace where every individual is treated with respect and has equal access to opportunities based solely on their qualifications and performance.