Solution Architect

Location: East Hartford, CT (Hybrid 3 days onsite/2 days remote)

Duration: 2 year contract

Scope of Services

The scope of services required for the Cybersecurity Network Security Architect includes:

• Expert-level design, implementation, administration, and optimization of Palo Alto Networks firewalls, Panorama, Global Protect, Prisma Access, and ION appliances.
• Expert-level implementation, hardening of Cisco networking and security infrastructure.
• Perform security hardening of Palo Alto and Cisco infrastructure in accordance with CJIS Security Policy, NIST SP 800-53 Rev. 5, IRS Publication 1075
• Perform security assessments of firewalls, Azure environments, network infrastructure, enterprise applications, and supporting systems.
• Develop Plans of Action and Milestones (POA&Ms) based on assessment findings and provide remediation recommendations.
• Review firewall rule bases, network segmentation, VPN configurations, routing, and remote access architectures to ensure security and compliance.
• Assist with the design and deployment of Palo Alto Prisma Access and ION appliances supporting remote office connectivity and Secure Access Service Edge (SASE).
• Evaluate Azure networking and security configurations to ensure secure integration with hybrid infrastructure.
• Design, implement, and optimize Azure ExpressRoute, routing, and Palo Alto cloud firewall connectivity for secure hybrid environments.
• Perform risk assessments and configuration reviews against CJIS Security Policy, NIST SP 800-53 Rev. 5, IRS Publication 1075, and Judicial Branch security standards.
• Work closely with infrastructure, networking, cloud, and application teams to remediate security findings.
• Assist with audit preparation and support for CJIS, IRS, and other regulatory compliance assessments.
• Develop technical documentation, architecture diagrams, assessment reports, and executive summaries.

Minimum Qualifications

In addition to the standard skills and experience for the job class, the ideal candidate should be prepared to discuss the following:

General Experience

• 8 years of expert-level hands-on experience with Cisco networking and security technologies.
• 6 years of expert-level hands-on experience with Palo Alto Networks, firewalls and security platforms.
• Demonstrated experience implementing cybersecurity best practices within highly available enterprise environments.

Technical Competencies

• Expert knowledge of Palo Alto Networks NGFW, Panorama, Global Protect, Prisma Access, and ION appliances.
• Expert knowledge of Cisco routing, switching, VPN, firewall, and network security technologies.
• Experience hardening network infrastructure to CJIS Security Policy, NIST SP 800-53 Rev. 5, IRS Publication 1075, and security best practices.
• Experience performing cybersecurity risk assessments and developing POA&Ms.
• Experience performing firewall, network, Azure, and application security assessments.
• Strong understanding of Zero Trust architecture, network segmentation, secure remote access, and Secure Access Service Edge (SASE).
• Experience securing Microsoft Azure networking and cloud infrastructure.
• Experience reviewing firewall policies, VPN configurations, routing, and network segmentation.
• Excellent written and verbal communication skills.
• Experience preparing technical documentation and presenting findings to technical and executive audiences.
• Palo Alto Networks and Cisco security certifications are highly desirable.
• CISSP, CISM, or equivalent cybersecurity certification is preferred.