• Coordinate the deployment, configuration, testing, monitoring, and ongoing maintenance of security technologies, including SIEM, EDR, DLP, WAF, CASB, Secure Web Gateway, URL filtering, email security, and application/vulnerability scanning platforms. • Lead small-to-medium-sized security initiatives from requirements gathering through design, testing, pilot execution, and implementation. • Support proof-of-concept evaluations and product assessments to ensure proposed solutions align with security strategy, standards, and industry best practices. • Act as a service or tool owner by identifying enhancements, maintaining operational runbooks, and recommending improvements for tools under your responsibility. • Develop and maintain procedures, workflows, architecture diagrams, and operational playbooks that support security monitoring and engineering activities. • Investigate and triage security events using technologies such as SIEM, EDR, DLP, WAF, CASB, Secure Web Gateway, and email security solutions. • Detect, respond to, and support investigations of security incidents while documenting root-cause analysis and lessons learned. • Follow established incident response procedures and playbooks, escalating critical findings appropriately and efficiently. • Apply analytical and adversarial thinking to identify, protect, detect, respond to, and recover from common cyber threats and attack vectors. • Perform and support secure baseline reviews, infrastructure scanning, endpoint scanning, application vulnerability assessments, penetration testing validation, and AI red-teaming exercises. • Review vulnerability findings for accuracy and completeness while partnering with stakeholders to prioritize remediation efforts based on risk. • Escalate critical vulnerabilities, zero-day threats, and high-priority risks while supporting rapid mitigation efforts. • Contribute to continuous improvements in vulnerability management workflows through automation and the integration of security testing into CI/CD pipelines. • Conduct security risk assessments for internal initiatives, product enhancements, vendors, and productivity tools. • Perform STRIDE-based threat modeling for internal projects and AI-enabled solutions, producing actionable recommendations and clear risk reports. • Apply a risk-based approach to evaluating Agentic AI technologies and AI-related security risks. • Conduct vendor risk assessments within OneTrust and support broader third-party risk management activities. • Identify opportunities to strengthen controls, improve processes, and enhance security outcomes across teams. • Stay informed on emerging threats, technologies, and industry best practices, sharing relevant insights with colleagues and stakeholders.

• Support the Texas Comptroller of Public Accounts on the Centralized Accounting and Payroll/Personnel System (CAPPS) Program. • Deliver highly advanced, senior-level consultative services and technical assistance in support of CAPPS security architecture, configuration, and compliance across HR/Payroll, Financials, STARR, and all ancillary systems. • Manage and enforce the CAPPS security framework, including role-based access control, segregation of duties, identity governance, and secure third-party integrations. • Provide Level 2 Service Desk support, system configuration and maintenance, and participation in major incident management, disaster recovery, and audit activities. • Monitor and analyze authentication, authorization, and privilege escalation logs for suspicious behavior; coordinate findings with the CPA Information Security Office. • Oversee secure integration of third-party applications via SAML, OAuth, OIDC, SCIM, and custom APIs. • Respond to and investigate identity-related security incidents, including account compromise, unauthorized access, and fraud indicators. • Review, validate, and suggest approval for all assigned security deliverables related to CAPPS Architecture, System Development Lifecycle, Disaster Recovery, and Security Plans (SSP). • Plan, design, develop, deploy, support, and maintain system configurations and modifications for the CAPPS HR/Payroll application to ensure accuracy, efficiency, and policy adherence. • Ensure all digital products and content meet WCAG 2.1 accessibility standards, regularly reviewing for compliance and implementing remediation as needed.

• Oversee IAM workflows including account lifecycle management, provisioning, de-provisioning, and access reviews within the TDIS and CAPPS ERP environment. • Manage and enforce role-based access control (RBAC) and least privilege models across ERP and connected systems. • Design, maintain, and remediate Segregation of Duties (SoD) rules across business processes within CAPPS multi-tenant applications. • Monitor authentication, authorization, and privilege escalation logs for suspicious activity and coordinate findings with the CPA Information Security Office. • Oversee secure integration of third-party applications via SAML, OAuth, OIDC, SCIM, and custom APIs. • Implement, support, and maintain PathLock products including User Access Review (UAR), Single Sign-On (SSO), Data Masking, and A360. • Ensure all digital products and content meet WCAG 2.1 accessibility standards, conducting regular compliance reviews and implementing remediation as needed. • Assist with contract management oversight responsibilities including IT control audits, SLA monitoring, technical reviews of contract templates and workflows, and compliance reporting. • Review and recommend approval for technical deliverables related to CAPPS architecture, system development lifecycle, disaster recovery, and security plans. • Participate as a security advisor during CPA procurement cycles, including drafting solicitation documents, providing technical specifications, and advising during evaluation and negotiation phases.

• Plan and implement security measures to meet federal compliance and protect computer systems, networks, and data. • Analyze and document security risks, breaches, and cyber security incidents to understand their impact and improve security measures. • Develop and implement network disaster recovery plans to ensure business continuity. • Oversee the monitoring of computer networks for security issues and take proactive measures to address potential threats. • Install and operate security software and measures, including firewalls and data encryption programs, to protect systems and information infrastructure. • Stay informed about the latest security trends and guidelines, especially those relevant to federal contracts, and make recommendations to enhance security posture.