Cybersecurity Network Security Architect

Project Description

• The Client is seeking a Solution Architect for the Information Technology Cybersecurity unit to support their cybersecurity, firewall, network security, and compliance initiatives. This is a highly complex Information Technology (IT) environment supporting mission-critical systems that require senior-level cybersecurity expertise. The successful candidate will be responsible for designing, assessing, hardening, and securing the Client's infrastructure while ensuring compliance with CJIS Security Policy, NIST SP 800-53 Rev. 5, IRS Publication 1075, and other applicable cybersecurity standards
• The selected candidate will provide technical leadership for Palo Alto and Cisco security technologies, assist with the deployment of Palo Alto Prisma Access and ION appliances for the Client's Secure Access Service Edge (SASE) initiative, perform comprehensive security assessments, and develop remediation plans to strengthen the overall security posture of the Judicial Branch

Scope of Services:

The scope of services required for the Cybersecurity Network Security Architect includes

• Expert-level design, implementation, administration, and optimization of Palo Alto Networks firewalls, Panorama, GlobalProtect, Prisma Access, and ION appliances.
• Expert-level implementation, hardening of Cisco networking and security infrastructure.
• Perform security hardening of Palo Alto and Cisco infrastructure in accordance with CJIS Security Policy, NIST SP 800-53 Rev. 5, IRS Publication 1075
• Perform security assessments of firewalls, Azure environments, network infrastructure, enterprise applications, and supporting systems.
• Develop Plans of Action and Milestones (POA&Ms) based on assessment findings and provide remediation recommendations.
• Review firewall rule bases, network segmentation, VPN configurations, routing, and remote access architectures to ensure security and compliance.
• Assist with the design and deployment of Palo Alto Prisma Access and ION appliances supporting remote office connectivity and Secure Access Service Edge (SASE).
• Evaluate Azure networking and security configurations to ensure secure integration with hybrid infrastructure.
• Design, implement, and optimize Azure ExpressRoute, routing, and Palo Alto cloud firewall connectivity for secure hybrid environments.
• Perform risk assessments and configuration reviews against CJIS Security Policy, NIST SP 800-53 Rev. 5, IRS Publication 1075, and Judicial Branch security standards.
• Work closely with infrastructure, networking, cloud, and application teams to remediate security findings.
• Assist with audit preparation and support for CJIS, IRS, and other regulatory compliance assessments.
• Develop technical documentation, architecture diagrams, assessment reports, and executive summaries.

Minimum Qualifications

In addition to the standard skills and experience for the job class, the ideal candidate should be prepared to discuss the following:

General Experience

• 8 years of expert-level hands-on experience with Cisco networking and security technologies.
• 6 years of expert-level hands-on experience with Palo Alto Networks firewalls and security platforms.
• Demonstrated experience implementing cybersecurity best practices within highly available enterprise environments

Technical Competencies

• Expert knowledge of Palo Alto Networks NGFW, Panorama, GlobalProtect, Prisma Access, and ION appliances.
• Expert knowledge of Cisco routing, switching, VPN, firewall, and network security technologies.
• Experience hardening network infrastructure to CJIS Security Policy, NIST SP 800-53 Rev. 5, IRS Publication 1075, and security best practices.
• Experience performing cybersecurity risk assessments and developing POA&Ms.
• Experience performing firewall, network, Azure, and application security assessments.
• Strong understanding of Zero Trust architecture, network segmentation, secure remote access, and Secure Access Service Edge (SASE).
• Experience securing Microsoft Azure networking and cloud infrastructure.
• Experience reviewing firewall policies, VPN configurations, routing, and network segmentation.
• Excellent written and verbal communication skills.
• Experience preparing technical documentation and presenting findings to technical and executive audiences.
• Palo Alto Networks and Cisco security certifications are highly desirable.
• CISSP, CISM, or equivalent cybersecurity certification is preferred