Security Systems Installer / Technician
Federal figures put this role between $38,800 and $81,150 a year, with a national median of $60,070.
What the job actually is.
Installs, terminates, programs and services electronic security systems: access control readers, controllers and door hardware interfaces, IP cameras and recorders, intrusion panels, and the network they all sit on. This is an installation and service seat, not a guard post.
What this role pays.
We have not closed enough physical security searches to publish a band of our own for this seat, so the figures above are the federal 10th to 90th percentile spread rather than a My Trade Talent band. They are national and not adjusted for experience or region.
The federal occupation for this role is Security and Fire Alarm Systems Installers (SOC 49-2098), May 2025. Nationally it reports a median of $60,070 , with the middle of the market between $38,800 and $81,150.
Where it pays most.
Security and Fire Alarm Systems Installers across the metros we cover, May 2025. BLS publishes a median for 99 of them and withholds the rest, where the local sample was too small to be reliable.
| Metro | Median | Employed there |
|---|---|---|
| San Jose | $81,980 | 320 |
| Worcester | $80,480 | - |
| San Francisco | $79,350 | 1,030 |
| Boston | $78,560 | 1,330 |
| Portland | $76,630 | 730 |
| Seattle | $75,910 | 1,000 |
| Providence | $75,350 | 360 |
| Hartford | $73,740 | 220 |
| McAllen | $45,210 | 150 |
| Augusta | $45,740 | 40 |
| Durham-Chapel Hill | $47,050 | 80 |
BLS Occupational Employment and Wage Statistics, May 2025. The last three rows are the lowest-paying metros in the same set. Headcount is metro-wide across every industry, not this trade alone.
Credentials that move an offer.
- Low-Voltage License
Licensing is a state question, not a national one. The Physical Security hiring page carries the state-by-state position, and every market page names the authority for that state.
What separates a strong candidate.
Everyone who applies for this seat will claim the experience. These are the things that distinguish the people who have it, and the questions that find out.
What to look for
- Names platforms configured - access control and video management by product - rather than listing manufacturers seen
- Comfortable on the network side: addressing, VLANs, PoE budgets, switch configuration
- Has integrated door hardware with fire alarm and life-safety egress requirements
Questions that find out
- A reader works but the door will not unlock. How do you isolate the fault? A strong answer Splits the problem at the controller: does the controller see the credential and decide to grant, and is it energising the output? If yes, the fault is downstream - the relay, the wiring, the power supply to the lock, or the lock itself. If no, it is the credential, the access level, the schedule or the door's configuration. Measures voltage at the lock rather than guessing, and checks the lock is not being held by a mechanical problem.
- How do you handle egress and fire alarm release on an access-controlled door? A strong answer Knows free egress is a life safety requirement and is never dependent on the access control system working, that the fire alarm interface must release the doors it is required to release on alarm and on loss of power where the code requires, and that this is wired as a hard interface rather than a software rule. Tests it by actuating the alarm rather than the relay. Knows this is the thing the inspector and the fire marshal will check.
- Cameras drop off the recorder intermittently. Where do you start? A strong answer Looks for the pattern first: which cameras, which switch, what time of day, and whether it coincides with load, with PoE budget, or with something else on the network. Checks the switch logs and the recorder logs rather than rebooting. Considers the usual causes - PoE budget exceeded as cameras ramp up at night, a marginal cable run failing when it warms, a duplicate address, a switch uplink saturating, or a failing power supply.
- Walk me through commissioning a door with a reader, REX and door position switch. A strong answer Tests each device for what it is supposed to do rather than just that the door opens: a valid credential grants and an invalid one does not, the request to exit releases and does not generate an alarm, the door position switch reports open and closed accurately and gives a held-open and forced-door alarm at the right timing. Checks the lock type matches fail safe or fail secure as designed, and tests power loss and fire release.
- How do you handle a lock that is failing mechanically rather than electrically? A strong answer Recognises the difference: a door that drags, a strike out of alignment, a closer out of adjustment, or a latch not throwing fully will defeat perfectly good electronics. Checks the door before the system - alignment, gap, closer, hinges, and whether the frame has moved. Tells the general contractor or the door hardware contractor rather than trying to compensate with voltage or timing, and knows this is the most common cause of a door that works intermittently.
- How do you handle a door that must fail safe versus fail secure, and who decides? A strong answer Knows fail safe unlocks on power loss and fail secure stays locked, that the choice follows the code, the building's egress strategy and the owner's security requirement, and that it is the architect, the code official or the owner's security policy that decides rather than the technician. Checks what is actually installed matches what was specified, and flags a stair door or an exit that is fail secure where it should not be.
- What is your process for camera placement when the client wants identification, not just detection? A strong answer Works from pixels on target rather than megapixels on a box: identification needs far more pixel density at the subject than detection, which drives the distance, the lens and the camera count. Considers the lighting, the backlight at a door, where people will actually be looking, and mounting height low enough to catch a face. Shows the client a live test from the proposed position rather than promising, because this is where expectations break.
- How do you document a system so the next technician is not reverse-engineering it? A strong answer Leaves what they would want: an as-built with device locations and addresses, the panel and port assignments, IP addresses and credentials handed over properly, door hardware types and lock functions, the programming logic and any custom rules, and the network configuration. Labels at both ends of every cable to match the drawing. Says the test of good documentation is whether somebody else could take a call on this site tonight.
- How do you commission a camera system so the images are actually usable? A strong answer Checks each camera's view against what it is supposed to cover, focuses at the distance and lighting the camera will actually work in rather than in daylight, sets exposure and backlight compensation for the worst condition, and verifies the night image rather than assuming infrared solves it. Confirms recording, retention and motion settings are producing usable footage, and does a retrieval test with the client.
- How do you handle a site where the customer has lost the system password? A strong answer Verifies who they are and that they have authority over the system before doing anything, because a password reset request is also how a system is attacked. Uses the manufacturer's documented recovery process with proof of ownership rather than a back door. Documents what was done and hands over credentials properly, with a plan for how they are stored this time. Will not install an unauthenticated back door for convenience.
- How do you troubleshoot an intercom or call station that fails intermittently? A strong answer Characterises the fault before touching anything - audio, video, call button, or the answering end - and whether it fails on temperature, weather, time of day or traffic. Checks power and PoE at the device under load, the cable run and terminations including any outdoor splice, and the network path for packet loss. Knows outdoor stations fail from water and corrosion more than anything else, and checks the gasket and the back box.
- What is your process for integrating with an existing panel from another manufacturer? A strong answer Finds out what the integration actually is before promising anything: a documented interface, a supported protocol, a dry-contact tie, or nothing. Checks firmware versions on both sides and whether the feature the client wants is supported in that version. Tests on the bench or in a limited area before cutting over. Says plainly when the honest answer is a hard contact interface rather than a true integration.
- How do you handle credentials and badge data during a system cutover? A strong answer Treats the cardholder data as sensitive personal data: exports and transfers it securely rather than on a memory stick left in a van, validates the import in a test environment, and checks access levels and schedules came across correctly rather than assuming. Keeps the old system live until the new one is proven. Deletes the working copies afterwards. Plans for the credentials that do not migrate - different formats and facility codes.
- What is your approach to a customer who wants to see everything on one screen? A strong answer Asks what they actually need to do rather than how many cameras they want visible, because a wall of thumbnails is how incidents get missed. Designs around the few views that matter, with alarms and events driving what appears. Explains what a single pane of glass costs in integration and licensing. Offers a realistic version rather than agreeing and delivering something nobody uses.
- How do you test a system so the customer trusts it? A strong answer Tests in front of them, on their scenarios rather than yours: badge in at that door, trigger that alarm, find that footage from last Tuesday, and have their own person do it rather than watching. Writes down what was tested and the result. Knows a system handed over with a demonstration the client never touched is a system they will not trust the first time it matters.
- What do you do when you find a door propped or a reader bypassed? A strong answer Reports it rather than quietly fixing it, because it is a security finding and usually a symptom: people prop doors that are inconvenient, and bypass readers that do not work. Finds out why - a door that is too slow, a credential that does not work, a route people need that nobody designed for - and puts that to the client with a fix. Restores the security in the meantime and records it.
The mistake this seat invites
Confusing this role with security guard staffing. It is a low-voltage technical trade with IT skills attached, and it is priced accordingly.
Where the role goes next
Technicians move to lead technician, then to systems integrator or project manager on the integration side. Candidates ask this in the first conversation, and an employer who cannot answer it loses the people who had other options.
Interview kit for this role
- All interview questions for this role in the question bank.
- Printable interview scorecard built from these questions and signals.
- The Physical Security hiring kit - every role in the trade, with credentials and offer risks.
- Offer calculator starting from this role's pay band.
What the search actually takes.
We have not closed a physical security search in 2026 year to date, so we publish no timing figure of our own for this seat rather than borrow one. The Hiring Index shows the trades where we do.
What we have open in Physical Security right now.
One live physical security search on our board as of November 12, 2026. These are roles contractors have asked us to fill, not a sample set.
- Account Executive - CCTV & Access Control Solutions - Omaha, Nebraska
Keep reading.
- 2026 Physical Security Salary Guide - the full benchmark by role.
- Physical Security recruiting - how we run this trade.
- Salary calculator - the band by experience and region.
- Physical Security hiring in Houston - one market in detail.
- Hiring Index - how long our searches actually take.
Other Physical Security roles we recruit
All 56 roles we recruit - every trade, every seat.