Security and Network Architect

Position Overview: The IT Security & Network Architect serves as the county’s technical authority for designing, implementing, and evolving an integrated network and security architecture, ensuring infrastructure and security operate as a unified ecosystem that protects systems, networks, and digital assets from emerging threats. Acting as a strategic partner to the Infrastructure Manager, this role provides senior-level architectural guidance for modernizing and sustaining the county’s infrastructure, exercising dotted-line technical leadership over network and security staff to influence standards, design decisions, and operational alignment. The position develops security policies, oversees network and security architecture, ensures regulatory compliance, and collaborates with internal teams, legal, law enforcement, and external partners to align architectural decisions with organizational risk tolerance, operational requirements, and long-term strategy.

Key Responsibilities:

IT Security Architecture & Network Design:

• Develop, implement, and maintain the county’s enterprise security and network architecture, ensuring both domains are intentionally designed together to be secure, resilient, scalable, and adaptable to evolving threats and business needs.
• Design and develop network architectures that inherently incorporate security controls, including segmentation, access controls, encryption, and monitoring, rather than treating security as a separate or downstream function.
• Produce and maintain detailed network and security architecture diagrams, standards, and documentation that establish a consistent design framework across the county.
• Ensure network security measures are integrated at all layers to protect against unauthorized access, data breaches, and service disruptions.

Risk Assessment & Security Protocols:

• Identify, assess, and mitigate security and infrastructure risks across all IT systems and platforms, with a focus on how network design choices impact overall security posture.
• Create, enforce, and maintain security policies, standards, and procedures that align with federal, state, and local regulations and are operationally achievable within the network environment.
• Define and guide the implementation of security technologies such as firewalls, intrusion detection/prevention systems, encryption tools, identity and access management, and secure network segmentation.

Incident Response & Security Improvements:

• Lead and coordinate the architectural response to security incidents, ensuring that network and security teams work in alignment during investigation, containment, and remediation efforts.
• Develop and maintain incident response and recovery strategies that reflect real-world network dependencies and infrastructure constraints.
• Stay informed of emerging cybersecurity and infrastructure threats, trends, and technologies, applying threat intelligence to proactively strengthen both network and security architectures.
• Drive continuous improvement of monitoring, detection, and response capabilities to reduce risk and improve resilience.

Strategic Collaboration, Influence & Technical Leadership:

• Serve as a key strategic advisor to the Infrastructure Manager, supporting long-term planning, architectural decisions, and modernization initiatives where network and security are deeply intertwined.
• Provide dotted-line technical leadership and guidance to network and security staff, influencing design decisions, implementation approaches, and adherence to architectural standards.
• Act as a unifying force between infrastructure, security, and operations teams to ensure solutions are aligned, sustainable, and defensible.
• Collaborate with internal stakeholders, law enforcement agencies, and external partners to ensure architecture decisions meet operational, regulatory, and public-sector requirements.

Project Management & Reporting:

• Lead and oversee complex, cross-functional infrastructure and security initiatives from conception through implementation, ensuring alignment with architectural standards, timelines, budgets, and risk management objectives.
• Prepare and present architectural, risk, and security posture updates to leadership and stakeholders, translating complex technical concepts into actionable insights.

COMPETENCIES: The following competencies are key to success in this role, enabling effective contribution, collaboration, and adaptability in a dynamic work environment.

• Strong analytical and problem-solving skills.
• Ability to assess and mitigate security risks across IT systems and platforms.
• Proficiency in leading the response to security incidents, including investigation, containment, and remediation.
• Ability to communicate complex security concepts to both technical and non-technical stakeholders.
• Strong knowledge of security frameworks and industry best practices.
• Expertise in network architecture and security design principles.
• Excellent project management skills with a focus on cybersecurity initiatives.
• Ability to work collaboratively across teams and departments.

PHYSICAL REQUIREMENTS: The position requires the ability to sit, stand, and walk for extended periods. It involves frequent use of hands and fingers for typing, writing, and operating office equipment. Occasional lifting of objects up to 25 pounds may be necessary. The role also requires the ability to communicate effectively both verbally and in writing and may involve attending evening and weekend meetings as required. Prolonged computer use may pose a risk for eye strain or repetitive motion injuries.

ENVIRONMENTAL CONDITIONS AND WORK HAZARDS: The work environment is primarily office-based, with occasional field visits to various sites. Employees may be exposed to typical office conditions, including computers, printers, and office equipment. During site visits or meetings, there may be occasional exposure to outdoor environments. The role may involve stress due to project deadlines, public interactions, and complex problem-solving. Prolonged computer use can also lead to eye strain and repetitive motion injuries.

SUPPLEMENTAL INFORMATION: 

This job description is not intended to be and should not be construed as an all-inclusive list of all the responsibilities, skills or working conditions associated with the position.  While it is intended to accurately reflect the position activities and requirements, Management reserves the right to modify, add or remove duties and assign other duties as necessary that are a logical assignment to the position.

EMERGENCY RESPONSE/RECOVERY ACTIVITIES: 

County employees are considered essential personnel in providing and continuing services to our community during and following a disaster, such as a hurricane, or in other emergency situations. As a requirement of County employment, County employees are subject to being required to remain at work during an event, respond to a recall immediately following an event and/or immediately reporting to work when an all clear is declared by the County Administrator.  During these types of events, County employees may temporarily be assigned to work and perform duties outside the normal scope of their position, location, and work schedule to fit the needs of the County and its citizens. 

ADA STATEMENT:

A qualified employee or applicant with a disability may be afforded a reasonable accommodation to perform the essential job functions of a position in compliance with the Americans with Disabilities Act.

EEO STATEMENT:

St. Lucie County BOCC is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We do not discriminate based on race, color, religion, gender, sexual orientation, national origin, age, disability, or any other protected characteristic. We encourage all qualified candidates to apply.

Candidates should possess a solid foundational background that demonstrates their ability to engage with the responsibilities of the role effectively.

• High school diploma or equivalent required.  Bachelor’s degree in Computer Science, Information Security, Information Systems, or a related field preferred. Extensive industry experience, advanced security certifications (e.g., CISSP, CISM, TOGAF), and a proven track record in enterprise security architecture may substitute for formal post-secondary education.
• A minimum of ten (10) years of total IT experience in enterprise environments, including demonstrated experience supporting large, complex, multi-site infrastructure comparable to a county-scale organization. 
• A minimum of six (6) years of progressive network engineering and architecture experience, including enterprise routing and switching, WAN/SD-WAN, network segmentation and design, enterprise-grade wireless, VoIP and QoS considerations, and demonstrated responsibility for network design—not solely operational support.
• A minimum of five (5) years of dedicated information security experience, including security architecture and control design, firewalls, IDS/IPS, VPNs and zero-trust concepts, identity and access management, incident response leadership, and compliance with frameworks such as CJIS, NIST, and ISO.
• Certifications such as CISSP, CISM, CCNP, CEH, or equivalent are preferred. Advanced certifications (e.g., SABSA, TOGAF) are a plus.
• Expertise in Windows Active Directory, Microsoft 365, and endpoint security systems.
• Ability to analyze and solve complex security problems and communicate effectively with non-technical stakeholders.
• Knowledge of federal, state, and local laws related to information systems and cybersecurity.
• A valid Florida driver’s license with a good driving record or the ability to obtain within 30 days of employment.
• Ability to work independently and collaboratively across teams and departments.
• Must be available during emergencies and natural disasters on short notice.
• This position may require evening and weekend work, sometimes with little advanced notice.

Pay Grade G208

Driving Position – Operating County vehicles and/or equipment is a primary function of this position.  

PRE-EMPLOYMENT SCREENING: This position requires a physical, drug testing, driver's license verification and level 2 background screening which includes fingerprinting.

Salary : $87,845 - $131,767