The Position
The Port of Portland is hiring a
Senior Hybrid-Cloud System Engineer (Security)
The Senior Hybrid-Cloud System Engineer (Security) ensures the Port’s hybrid IT infrastructure is secure, resilient, and scalable by leading the design, integration, and deployment of modern cloud and on-premises technologies. This role serves as a technical security expert, partnering closely with Information Security to translate emerging threats and standards into effective operational controls. By architecting solutions across AWS, Azure, and on-premises environments, this position enhances the Port’s security posture and supports critical business objectives.
From The Hiring Manager
Imagine engineering the technology backbone of an international airport—where every system you touch keeps people moving safely and keeps operations running flawlessly. On our IT Infrastructure team, you won’t just maintain systems; you’ll shape them and keep them secure. We’re a tight-knit, constantly learning group that loves exploring new technologies and tackling complex challenges. From securing a mission-critical environment to driving emerging IT initiatives across the Port, you’ll work on standout projects that truly matter. If you’re energized by solving real-world problems at scale and want to grow in a culture that values curiosity, collaboration, and innovation, this is where your impact will take off.
Essential Job Duties
Key Responsibilities
Hybrid Infrastructure Engineering and Automation
- Engineer secure, scalable, and operationalized cloud and on-prem infrastructure solutions using modern architectural frameworks and automation-first strategies.
- Develop, maintain, and optimize CI/CD pipelines with integrated security scanning, compliance validation, and deployment automation.
- Implement and manage infrastructure-as-code workflows and automation (Terraform, CloudFormation, Ansible, GitHub Actions, Jenkins).
- Design and administer application-layer, network, and cloud security controls, including firewalls, IAM policies, segmentation, and monitoring.
- Integrate complex systems and services with automated scanning, policy enforcement, and security instrumentation.
Security Engineering and Architecture
- Lead the design and implementation of secure hybrid-cloud architecture across AWS, Azure, and on-prem systems.
- Partner with the Information Security team to translate organizational security requirements into engineered controls, secure deployment patterns, and automated policy enforcement.
- Develop and maintain secure configuration standards, reference architectures, and runbooks for infrastructure and application-layer security technologies.
- Evaluate emerging technologies (AI, Kubernetes orchestration, service mesh architectures, GitOps workflows, and advanced cloud constructs) to drive innovation and organizational transformation.
Security and Operational Incident Response and Compliance
- Respond as primary security engineer to hybrid-infrastructure security events, outages, and complex incident investigations.
- Conduct root cause analysis, implement containment and remediation actions, and lead preventative hardening efforts across multi-cloud and on-prem systems.
- Support internal, external security, and operational audits by providing technical documentation, system evidence, compliance reporting, and performing systems remediation activities.
Full position description available upon request.
Minimum Qualifications
- Five (5) + years of progressive experience in Administration and/or engineering of cloud and hybrid infrastructure server environments.
- Bachelor’s Degree – Computer Science or related field, or a combination of related education, industry certification, and demonstrated experience.
- Ability to pass a criminal history records check to allow entry to secure airport areas (Grey Badge).
- CJIS background clearance (due to access to secure information at the airport).
- Clear credit check (due to access to sensitive financial information).
Senior-level Knowledge, Skills & Abilities Desired For This Role
- Hybrid Cloud & Infrastructure Concepts: Architecture and operations across AWS, Azure, and on-premises platforms; virtualization; operating systems; enterprise identity systems; core infrastructure services.
- Security Frameworks & Principles: NIST CSF, CIS Controls, zero-trust architecture; IAM and PAM concepts; encryption, PKI, secrets management; policy-based security models.
- DevSecOps & Automation Foundations: CI/CD concepts, infrastructure-as-code methodologies, secure coding practices, GitOps principles, automated compliance validation.
- Architect and deliver secure hybrid-cloud solutions across AWS, Azure, and on-prem environments.
- Implement engineered security controls, secure deployment pipelines, and automated policy enforcement.
- Troubleshoot and resolve complex incidents spanning cloud, network, compute, and application layers.
Supplemental and Selection Information
- A minimum qualification evaluation of the education, training, and experience of submitted application packets will take place by Talent Acquisition until this role closes.
- A Subject Matter Expert (SME) Panel will perform an evaluation of experience and training taken from your employment application materials.
- Our goal is to notify candidates who are selected for interviews the week following the close of the posting. We will then schedule the virtual first round of interviews with candidates who successfully passed the SME evaluation. Panel Interviews will be held afterward.
About Us
At the Port of Portland, we use everything we have – our three airports, three working marine terminals, six business parks, and all the resources, expertise, and experience behind them – to move with purpose, connecting people with powerful opportunities and creating value for our region. We know that every person we hire, business we work with, contract we sign and decision we make is a chance to make someone’s life better. And we’ll use our power and influence to unlock new opportunities and ensure more people share in our region’s success. With YOUR help – together with our partners, customers, and community – we’ll help drive meaningful change!
Do you have questions about this job?
Contact us: careers@portofportland.com
Safety: The Port promotes safety as a Core value and we seek to eliminate harm through a culture of active prevention, curiosity, evaluation, and action. We comply with safety and health policies and procedures and consistently look for improvements that support operational excellence.
Equal Opportunity Employer: The Port of Portland is dedicated to maintaining and improving a work environment, which extends equal opportunity to all individuals, regardless of their race, color, sex, age, religion, national origin, marital status, veteran status, disability or sexual orientation. Employment decisions shall be made in such a manner as to further the principle of equal employment opportunity and to comply with state, federal and local laws. We affirm through this policy statement our continuing commitment to the principles of nondiscrimination.
Veterans Preference: Under Oregon law, qualified veterans may be eligible for veterans’ preference when applying for Port of Portland positions. If you are a veteran and would like to be considered for a veteran’s preference for this job, please provide the qualifying documents as instructed during the application process.
Background Checks and Drug Testing: The Port of Portland will conduct background checks and/or drug tests for positions where such tests are required by regulation and for other safety-sensitive positions.
ADA Accommodation: Accommodations will be considered for applicants or candidates with a qualifying disability that prevents them from participating in this process. Accommodations will be made where the Port can reasonably do so without imposing an undue hardship on the business or compromising the integrity of the recruitment process. An applicant with any disability who believes that they need an accommodation should contact Human Resources: call 503-415-6690 or email careers@portofportland.com.
Know Your Rights: Workplace Discrimination is Illegal
https://www.eeoc.gov/know-your-rights-workplace-discrimination-illegal
At the Port of Portland, we strive to offer a holistic and comprehensive benefits package for employees and their families. We care about your health by offering highly-subsidized healthcare plans that include alternative care. We look out for you and for family by paying for life and accidental death & dismemberment (AD&D) insurance, short-term and long-term disability coverage. We participate in the Oregon Public Employees Retirement System (PERS) retirement program. We provide access to additional coverage and benefits including pre-tax spending accounts, voluntary term life insurance, a deferred compensation plan, and critical illness and accident insurance policies.
We go above and beyond by offering an award-winning wellness program for all employees to engage in. Employees can tend to their physical and mental health, earn rewards, and create community. Our employee assistance program supports the Port’s commitment to emotional and mental well-being by providing mental health services, discounts on local gyms, and pet insurance for companions.
Our commitment to work-life balance ensures you have time to spend with loved ones and do the things you enjoy. We offer generous vacation time that accrues with length of service, sick leave that never expires and can be used for dependent care, health maintenance and mental health, and 8 weeks of paid parental leave – all in addition to 10 paid holidays. As an added bonus – because we know employees use their time off differently – once a year we give employees the opportunity to convert sick leave to personal leave, and to convert vacation leave to either cash, a retirement plan contribution, or a contribution to a Health Savings Account.
Please note: Some benefits vary by job type/group, so please be sure to review your comprehensive benefit guide and/or collective bargaining agreement upon hire to confirm what is available to you.
01
Which cloud platforms have you worked with?
02
What types of cloud architectures or environments have you supported?
03
Please confirm your understanding (by answering YES) that you understand that this role requires an on-site presence at the Port of Portland for a minimum of 3 days a week and that the person hired must reside within commuting distance at the time of hire.
