Cybersecurity Architect

Title- Cybersecurity Architect

Location: 100% on-site, Orange, CA / Santa Ana, CA

Duration : 6 months Contract to hire

 

Duties and Responsibilities:

·         Design, Implement and maintain Palo Alto Network firewalls (NGFW), Panorama Central Management and related security services (Wildfire, Threat Prevention, URL Filtering, Anti-Virus, etc.)
·         Develop and enforce high-level security policies, rule sets and zone segmentation to align with Zero Trust principles across the entire network.
·         Serve as the top-tier subject matter expert for all Palo-Alto related security engineering, configuration and troubleshooting.
·         Architect and optimize secure remote access solutions leveraging solutions such as Palo Alto GlobalProtect or other enterprise VPN technologies ensuring least privilege and MFA requirements are enforced and properly implemented.
·         Develop and enforce security policies for corporate and guest wireless networks, ensuring segmentation, use of secure authentication protocols and encryption methodology.
·         Design and implement secure DNS architecture utilizing DNSSEC or private DNS Services.
·         Lead the design and tuning of the enterprise SIEM.
·         Lead the design and tuning of device log integration into enterprise SIEM.
·         Develop advanced correlation rules, alerts, dashboards and reporting to identify, prioritize and track security threats and anomalies.
·         Develop, maintain and test the Incident Response Plan and playbooks.
·         Act as a lead resource during critical security incidents, providing technical expertise to guide the incident response lifecycle (Preparation, Detection, Containment, Eradication, Recovery, Lessons Learned)
·         Conduct post-incident reviews to identify architectural gaps and define immediate and long-term security enhancements.
·         Ensure all security architectures, policies and operational procedures strictly comply with local, state and federal mandates, specifically the CJIS requirements.
·         Create and maintain enterprise-wide security standards, security control baselines, and reference architecture to dictate how technology is securely implemented across the organization.
·         Conduct regular security assessments to identify control deficiencies and define remediation strategies.

Required Qualifications

·         BS in Cybersecurity or related technical field, 7+ years relevant industry experience,

·         or MS in Cybersecurity or related technical field, 5+ years relevant industry experience,

·         or PhD in Cybersecurity or related technical field with 4+ years industry experience.

Required Certifications: Certified Information Systems Security Professional (CISSP) or GIAC Reverse Engineering Malware (GREM) or similar.