Cybersecurity Architect

About This Role

This role provides technical leadership to design, develop, and implement enterprise security architecture, protect assets and data, and ensure compliance with CJIS. The scope includes Palo Alto firewalls and services, VPN and wireless security, DNS security, SIEM design and tuning, and incident response lifecycle leadership. The position is 100% on-site within a CJIS-compliant environment and requires the ability to pass a law enforcement background check.

Responsibilities

• Design, implement, and maintain Palo Alto NGFWs, Panorama, and security services including WildFire, Threat Prevention, URL Filtering, and Anti-Virus
• Develop and enforce security policies, rule sets, and zone segmentation aligned to Zero Trust
• Serve as top-tier SME for Palo Alto engineering, configuration, and troubleshooting
• Architect and optimize secure remote access using GlobalProtect or similar, enforcing least privilege and MFA
• Develop and enforce corporate and guest wireless security, including segmentation and secure authentication and encryption
• Design and implement secure DNS architecture using DNSSEC or private DNS services
• Lead SIEM design and tuning, device log integration, and creation of correlation rules, alerts, dashboards, and reporting
• Develop, maintain, and test Incident Response plans and playbooks; lead incidents across the full lifecycle and conduct post-incident reviews
• Ensure compliance with CJIS and maintain security standards, control baselines, and reference architectures
• Conduct regular security assessments and define remediation strategies

Requirements

• Professional experience providing technical leadership in a SOC or similar cyber services organization
• Strong understanding of Palo Alto Networks architecture and technologies, including firewalls and intrusion prevention
• Experience with network security design, deployment, and maintenance
• Experience troubleshooting security issues and providing user support
• Project management capability and the ability to manage multiple projects simultaneously
• Ability to work independently and as part of a team, under pressure, meet deadlines, work overtime, and work flexible hours including weekends and overnight
• Experience identifying security risks, developing mitigation plans, and implementing security tools and services
• Experience developing and interpreting security policies and procedures and participating in compliance efforts
• Experience delivering security training and evaluating emerging security technologies
• Background in security engineering, system and network security, authentication and security protocols, cryptography, and application security, including vulnerability testing and auditing