Cybersecurity / Systems Engineer .Gov Migration & Security Implementation

Cybersecurity / Systems Engineer .Gov Migration & Security Implementation

Client: State of Vermont
Project: Local Government Cybersecurity Modernization
Work Focus: Domain migration, MFA implementation, and cybersecurity training enablement.

Position Overview

The engineer will support cybersecurity modernization initiatives for municipal government entities. The role focuses on improving security posture through .gov domain migration, Multi-Factor Authentication (MFA) implementation, and cybersecurity best practices.

The candidate will work with municipal IT teams to migrate services, secure identity platforms, and implement authentication controls while ensuring minimal service disruption.

Key Responsibilities

1. .Gov Domain Migration & Website Security

• Verify municipality eligibility and assist with .gov domain registration with CISA.

• Audit existing website infrastructure, CMS platforms, hosting environments, and email systems.

• Develop and execute domain migration plans including rollback strategies.

• Migrate website content, documents, and historical records to the new .gov domain.

• Ensure website design is responsive, mobile-friendly, and compliant with accessibility standards (WCAG 2.1 AA).

• Implement SSL/TLS certificates and security configurations for hosting environments.

• Configure DNS records and domain routing.

• Implement 301 redirects from legacy URLs to the new domain.

• Provide post-migration technical support and stabilization.

2. Email System Migration

• Configure and provision municipal staff email accounts on modern platforms such as:

  • Microsoft 365

  • Google Workspace

• Migrate historical email data, including:

  • Inbox and sent mail

  • Calendars

  • Contacts

• Configure DNS and email authentication protocols, including:

  • SPF

  • DKIM

  • DMARC

• Ensure secure and reliable email delivery.

3. Multi-Factor Authentication (MFA) Implementation

• Assess municipal systems for MFA compatibility and integration.

• Configure identity management platforms such as:

  • Azure AD / Microsoft Entra ID

  • Google Admin

• Implement MFA policies requiring hardware tokens or authenticator applications.

• Configure MFA support for systems including:

  • Email

  • VPN access

  • Line-of-business applications

• Conduct pilot testing and validation of authentication workflows.

• Support user enrollment and credential binding for MFA.

• Retire legacy authentication mechanisms and insecure credentials.

4. Security Configuration & Identity Management

• Implement identity security best practices across municipal systems.

• Configure hardware security tokens (FIDO2 / U2F) when applicable.

• Configure authenticator applications for secure login workflows.

• Assist with policy creation for MFA enforcement and credential security.

• Ensure systems follow modern cybersecurity frameworks and federal guidance.

5. Training & Knowledge Transfer

• Provide hands-on training for municipal staff on:

  • Website CMS management

  • Email system administration

  • MFA enrollment and authentication workflows

• Train local IT administrators on:

  • Token revocation and replacement

  • Authenticator reset and re-enrollment

  • Identity security management

• Develop documentation for ongoing system administration.

Required Technical Skills

• DNS configuration and domain management

• Email authentication protocols (SPF, DKIM, DMARC)

• Identity and access management

• MFA implementation and authentication technologies

• Azure AD / Microsoft Entra ID or Google Workspace administration

• SSL/TLS security configuration

• Website hosting and CMS platforms

• Security hardening and vulnerability mitigation

Preferred Skills

• Experience with government or public sector IT environments

• Experience implementing FIDO2/U2F hardware tokens

• Knowledge of WCAG 2.1 accessibility standards

• Experience with cybersecurity frameworks and identity security

Work Focus Areas

• Domain migration to secure .gov infrastructure

• Identity security and authentication controls

• Municipal cybersecurity modernization

• Training and technical enablement for local IT teams