Cybersecurity Architect

BS in Cybersecurity or related technical field, 7+ years relevant industry experience, · or MS in Cybersecurity or related technical field, 5+ years relevant industry experience, · or PhD in Cybersecurity or related technical field with 4+ years industry experience. · Architect and optimize secure remote access solutions leveraging solutions such as Palo Alto GlobalProtect or other enterprise VPN technologies ensuring least privilege and MFA requirements are enforced and properly implemented.

Title- Cybersecurity Architect

Location: 100% on-site, Orange, CA / Santa Ana, CA

Duration : 6 months Contract to hire

 

Duties and Responsibilities:

·         Design, Implement and maintain Palo Alto Network firewalls (NGFW), Panorama Central Management and related security services (Wildfire, Threat Prevention, URL Filtering, Anti-Virus, etc.)
·         Develop and enforce high-level security policies, rule sets and zone segmentation to align with Zero Trust principles across the entire network.
·         Serve as the top-tier subject matter expert for all Palo-Alto related security engineering, configuration and troubleshooting.
·         Architect and optimize secure remote access solutions leveraging solutions such as Palo Alto GlobalProtect or other enterprise VPN technologies ensuring least privilege and MFA requirements are enforced and properly implemented.
·         Develop and enforce security policies for corporate and guest wireless networks, ensuring segmentation, use of secure authentication protocols and encryption methodology.
·         Design and implement secure DNS architecture utilizing DNSSEC or private DNS Services.
·         Lead the design and tuning of the enterprise SIEM.
·         Lead the design and tuning of device log integration into enterprise SIEM.
·         Develop advanced correlation rules, alerts, dashboards and reporting to identify, prioritize and track security threats and anomalies.
·         Develop, maintain and test the Incident Response Plan and playbooks.
·         Act as a lead resource during critical security incidents, providing technical expertise to guide the incident response lifecycle (Preparation, Detection, Containment, Eradication, Recovery, Lessons Learned)
·         Conduct post-incident reviews to identify architectural gaps and define immediate and long-term security enhancements.
·         Ensure all security architectures, policies and operational procedures strictly comply with local, state and federal mandates, specifically the CJIS requirements.
·         Create and maintain enterprise-wide security standards, security control baselines, and reference architecture to dictate how technology is securely implemented across the organization.
·         Conduct regular security assessments to identify control deficiencies and define remediation strategies.

Required Qualifications

·         BS in Cybersecurity or related technical field, 7+ years relevant industry experience,

·         or MS in Cybersecurity or related technical field, 5+ years relevant industry experience,

·         or PhD in Cybersecurity or related technical field with 4+ years industry experience.

Required Certifications: Certified Information Systems Security Professional (CISSP) or GIAC Reverse Engineering Malware (GREM) or similar.