Highlights
The selected candidate will provide technical leadership for Palo Alto and Cisco security technologies, assist with the deployment of Palo Alto Prisma Access and ION appliances for the Branch's Secure Access Service Edge (SASE) initiative, perform comprehensive security assessments, and develop remediation plans to strengthen the overall security posture of the Judicial Branch. The scope of services required for the Cybersecurity Network Security Architect includes: " Expert-level design, implementation, administration, and optimization of Palo Alto Networks firewalls, Panorama, GlobalProtect, Prisma Access, and ION appliances.
Numbers & Facts
| Location | East Hartford, CT |
| Industry | Computer/IT Services |
| Company Size | 100 to 499 employees |
| Year Founded | 1997 |
| Website | https://www.tscti.com/careers-0 |
Description
Project Description
The State of Connecticut Judicial Branch is seeking a Solution Architect for the Information Technology Cybersecurity unit to support the Branch's cybersecurity, firewall, network security, and compliance initiatives. This is a highly complex Information Technology (IT) environment supporting mission-critical systems that require senior-level cybersecurity expertise. The successful candidate will be responsible for designing, assessing, hardening, and securing the Judicial Branch's infrastructure while ensuring compliance with CJIS Security Policy, NIST SP 800-53 Rev. 5, IRS Publication 1075, and other applicable cybersecurity standards.
The selected candidate will provide technical leadership for Palo Alto and Cisco security technologies, assist with the deployment of Palo Alto Prisma Access and ION appliances for the Branch's Secure Access Service Edge (SASE) initiative, perform comprehensive security assessments, and develop remediation plans to strengthen the overall security posture of the Judicial Branch.
Scope of Services
The scope of services required for the Cybersecurity Network Security Architect includes:
" Expert-level design, implementation, administration, and optimization of Palo Alto Networks firewalls, Panorama, GlobalProtect, Prisma Access, and ION appliances.
" Expert-level implementation, hardening of Cisco networking and security infrastructure.
" Perform security hardening of Palo Alto and Cisco infrastructure in accordance with CJIS Security Policy, NIST SP 800-53 Rev. 5, IRS Publication 1075
" Perform security assessments of firewalls, Azure environments, network infrastructure, enterprise applications, and supporting systems.
" Develop Plans of Action and Milestones (POA&Ms) based on assessment findings and provide remediation recommendations.
" Review firewall rule bases, network segmentation, VPN configurations, routing, and remote access architectures to ensure security and compliance.
" Assist with the design and deployment of Palo Alto Prisma Access and ION appliances supporting remote office connectivity and Secure Access Service Edge (SASE).
" Evaluate Azure networking and security configurations to ensure secure integration with hybrid infrastructure.
" Design, implement, and optimize Azure ExpressRoute, routing, and Palo Alto cloud firewall connectivity for secure hybrid environments.
" Perform risk assessments and configuration reviews against CJIS Security Policy, NIST SP 800-53 Rev. 5, IRS Publication 1075, and Judicial Branch security standards.
" Work closely with infrastructure, networking, cloud, and application teams to remediate security findings.
" Assist with audit preparation and support for CJIS, IRS, and other regulatory compliance assessments.
" Develop technical documentation, architecture diagrams, assessment reports, and executive summaries
Minimum Qualifications
In addition to the standard skills and experience for the job class, the ideal candidate should be prepared to discuss the following:
General Experience:
" 8+ years of expert-level hands-on experience with Cisco networking and security technologies.
" 6+ years of expert-level hands-on experience with Palo Alto Networks firewalls and security platforms.
" Demonstrated experience implementing cybersecurity best practices within highly available enterprise environments.
Technical Competencies
" Expert knowledge of Palo Alto Networks NGFW, Panorama, GlobalProtect, Prisma Access, and ION appliances.
" Expert knowledge of Cisco routing, switching, VPN, firewall, and network security technologies.
" Experience hardening network infrastructure to CJIS Security Policy, NIST SP 800-53 Rev. 5, IRS Publication 1075, and security best practices.
" Experience performing cybersecurity risk assessments and developing POA&Ms.
" Experience performing firewall, network, Azure, and application security assessments.
" Strong understanding of Zero Trust architecture, network segmentation, secure remote access, and Secure Access Service Edge (SASE).
" Experience securing Microsoft Azure networking and cloud infrastructure.
" Experience reviewing firewall policies, VPN configurations, routing, and network segmentation.
" Excellent written and verbal communication skills.
" Experience preparing technical documentation and presenting findings to technical and executive audiences.
" Palo Alto Networks and Cisco security certifications are highly desirable.
" CISSP, CISM, or equivalent cybersecurity certification is preferred.
Timetable
The selected candidate may be able to join the ITD team as soon as the onboarding process is completed. A duty station will be assigned at ITD in East Hartford, with opportunities for hybrid remote work (3-days on-site and 2 days remote) and a work schedule of 40 hours per week. The position may be renewed periodically based upon a consultant's performance and the availability of funding. On-site attendance is mandatory on designated in-office days at the Judicial Branch Information Technology Division in East Hartford. The role also requires availability for after-hours on-call support as needed in the event of system emergencies, and occasional weekend work will be scheduled for system maintenance and upgrades.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.
The State of Connecticut Judicial Branch is seeking a Solution Architect for the Information Technology Cybersecurity unit to support the Branch's cybersecurity, firewall, network security, and compliance initiatives. This is a highly complex Information Technology (IT) environment supporting mission-critical systems that require senior-level cybersecurity expertise. The successful candidate will be responsible for designing, assessing, hardening, and securing the Judicial Branch's infrastructure while ensuring compliance with CJIS Security Policy, NIST SP 800-53 Rev. 5, IRS Publication 1075, and other applicable cybersecurity standards.
The selected candidate will provide technical leadership for Palo Alto and Cisco security technologies, assist with the deployment of Palo Alto Prisma Access and ION appliances for the Branch's Secure Access Service Edge (SASE) initiative, perform comprehensive security assessments, and develop remediation plans to strengthen the overall security posture of the Judicial Branch.
Scope of Services
The scope of services required for the Cybersecurity Network Security Architect includes:
" Expert-level design, implementation, administration, and optimization of Palo Alto Networks firewalls, Panorama, GlobalProtect, Prisma Access, and ION appliances.
" Expert-level implementation, hardening of Cisco networking and security infrastructure.
" Perform security hardening of Palo Alto and Cisco infrastructure in accordance with CJIS Security Policy, NIST SP 800-53 Rev. 5, IRS Publication 1075
" Perform security assessments of firewalls, Azure environments, network infrastructure, enterprise applications, and supporting systems.
" Develop Plans of Action and Milestones (POA&Ms) based on assessment findings and provide remediation recommendations.
" Review firewall rule bases, network segmentation, VPN configurations, routing, and remote access architectures to ensure security and compliance.
" Assist with the design and deployment of Palo Alto Prisma Access and ION appliances supporting remote office connectivity and Secure Access Service Edge (SASE).
" Evaluate Azure networking and security configurations to ensure secure integration with hybrid infrastructure.
" Design, implement, and optimize Azure ExpressRoute, routing, and Palo Alto cloud firewall connectivity for secure hybrid environments.
" Perform risk assessments and configuration reviews against CJIS Security Policy, NIST SP 800-53 Rev. 5, IRS Publication 1075, and Judicial Branch security standards.
" Work closely with infrastructure, networking, cloud, and application teams to remediate security findings.
" Assist with audit preparation and support for CJIS, IRS, and other regulatory compliance assessments.
" Develop technical documentation, architecture diagrams, assessment reports, and executive summaries
Minimum Qualifications
In addition to the standard skills and experience for the job class, the ideal candidate should be prepared to discuss the following:
General Experience:
" 8+ years of expert-level hands-on experience with Cisco networking and security technologies.
" 6+ years of expert-level hands-on experience with Palo Alto Networks firewalls and security platforms.
" Demonstrated experience implementing cybersecurity best practices within highly available enterprise environments.
Technical Competencies
" Expert knowledge of Palo Alto Networks NGFW, Panorama, GlobalProtect, Prisma Access, and ION appliances.
" Expert knowledge of Cisco routing, switching, VPN, firewall, and network security technologies.
" Experience hardening network infrastructure to CJIS Security Policy, NIST SP 800-53 Rev. 5, IRS Publication 1075, and security best practices.
" Experience performing cybersecurity risk assessments and developing POA&Ms.
" Experience performing firewall, network, Azure, and application security assessments.
" Strong understanding of Zero Trust architecture, network segmentation, secure remote access, and Secure Access Service Edge (SASE).
" Experience securing Microsoft Azure networking and cloud infrastructure.
" Experience reviewing firewall policies, VPN configurations, routing, and network segmentation.
" Excellent written and verbal communication skills.
" Experience preparing technical documentation and presenting findings to technical and executive audiences.
" Palo Alto Networks and Cisco security certifications are highly desirable.
" CISSP, CISM, or equivalent cybersecurity certification is preferred.
Timetable
The selected candidate may be able to join the ITD team as soon as the onboarding process is completed. A duty station will be assigned at ITD in East Hartford, with opportunities for hybrid remote work (3-days on-site and 2 days remote) and a work schedule of 40 hours per week. The position may be renewed periodically based upon a consultant's performance and the availability of funding. On-site attendance is mandatory on designated in-office days at the Judicial Branch Information Technology Division in East Hartford. The role also requires availability for after-hours on-call support as needed in the event of system emergencies, and occasional weekend work will be scheduled for system maintenance and upgrades.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.
About Company
22nd Century Technologies, Inc., is one of the fastest growing IT Service Integrator and Workforce Solution companies in the United States. Founded in 1997, 22nd Century Technologies is a Certified National Minority Business Enterprise with 6,000+ people including 600+ Cyber SMEs nationwide supporting our customers in all 50 states, Canada, and Mexico. With HQs in Somerset, NJ and Mclean, VA, 22nd Century has 14 offices throughout the United States. As part of our unrelenting focus on quality and compliance, 22nd Century Technologies’ delivery is based on Certified Matured Processes including CMMI L3 Dev & SVC, ISO 20000, ISO 27001, and ISO 9001 quality processes. With a strong focus on the public sector, 22nd Century currently holds government contracts with 14 out of 15 Federal Executive agencies including DoD, 37 other Federal agencies, 50 States, 115+ Local agencies, and 37 School Districts. In the last three years, we have expanded our services to Fortune 500 and other commercial clients and currently support 80+ commercial clients.
Recognized among “Best Company to Work For” by Forbes, 22nd Century Technologies, Inc., consistently exceeds our clients’ expectations by focusing on their absolute satisfaction with jobs while keeping our employees motivated.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.