Solution Architect

Project Description
The State of Connecticut Judicial Branch is seeking a Solution Architect for the Information Technology Cybersecurity unit to support the Branch's cybersecurity, firewall, network security, and compliance initiatives. This is a highly complex Information Technology (IT) environment supporting mission-critical systems that require senior-level cybersecurity expertise. The successful candidate will be responsible for designing, assessing, hardening, and securing the Judicial Branch's infrastructure while ensuring compliance with CJIS Security Policy, NIST SP 800-53 Rev. 5, IRS Publication 1075, and other applicable cybersecurity standards.


The selected candidate will provide technical leadership for Palo Alto and Cisco security technologies, assist with the deployment of Palo Alto Prisma Access and ION appliances for the Branch's Secure Access Service Edge (SASE) initiative, perform comprehensive security assessments, and develop remediation plans to strengthen the overall security posture of the Judicial Branch.



Scope of Services
The scope of services required for the Cybersecurity Network Security Architect includes:
• Expert-level design, implementation, administration, and optimization of Palo Alto Networks firewalls, Panorama, GlobalProtect, Prisma Access, and ION appliances.
• Expert-level implementation, hardening of Cisco networking and security infrastructure.
• Perform security hardening of Palo Alto and Cisco infrastructure in accordance with CJIS Security Policy, NIST SP 800-53 Rev. 5, IRS Publication 1075
• Perform security assessments of firewalls, Azure environments, network infrastructure, enterprise applications, and supporting systems.
• Develop Plans of Action and Milestones (POA&Ms) based on assessment findings and provide remediation recommendations.
• Review firewall rule bases, network segmentation, VPN configurations, routing, and remote access architectures to ensure security and compliance.
• Assist with the design and deployment of Palo Alto Prisma Access and ION appliances supporting remote office connectivity and Secure Access Service Edge (SASE).
• Evaluate Azure networking and security configurations to ensure secure integration with hybrid infrastructure.
• Design, implement, and optimize Azure ExpressRoute, routing, and Palo Alto cloud firewall connectivity for secure hybrid environments.
• Perform risk assessments and configuration reviews against CJIS Security Policy, NIST SP 800-53 Rev. 5, IRS Publication 1075, and Judicial Branch security standards.
• Work closely with infrastructure, networking, cloud, and application teams to remediate security findings.
• Assist with audit preparation and support for CJIS, IRS, and other regulatory compliance assessments.
• Develop technical documentation, architecture diagrams, assessment reports, and executive summaries



Minimum Qualifications
In addition to the standard skills and experience for the job class, the ideal candidate should be prepared to discuss the following:



General Experience:
• 8+ years of expert-level hands-on experience with Cisco networking and security technologies.
• 6+ years of expert-level hands-on experience with Palo Alto Networks firewalls and security platforms.
• Demonstrated experience implementing cybersecurity best practices within highly available enterprise environments.



Technical Competencies
• Expert knowledge of Palo Alto Networks NGFW, Panorama, GlobalProtect, Prisma Access, and ION appliances.
• Expert knowledge of Cisco routing, switching, VPN, firewall, and network security technologies.
• Experience hardening network infrastructure to CJIS Security Policy, NIST SP 800-53 Rev. 5, IRS Publication 1075, and security best practices.
• Experience performing cybersecurity risk assessments and developing POA&Ms.
• Experience performing firewall, network, Azure, and application security assessments.
• Strong understanding of Zero Trust architecture, network segmentation, secure remote access, and Secure Access Service Edge (SASE).
• Experience securing Microsoft Azure networking and cloud infrastructure.
• Experience reviewing firewall policies, VPN configurations, routing, and network segmentation.
• Excellent written and verbal communication skills.
• Experience preparing technical documentation and presenting findings to technical and executive audiences.
• Palo Alto Networks and Cisco security certifications are highly desirable.
• CISSP, CISM, or equivalent cybersecurity certification is preferred.



Timetable
The selected candidate may be able to join the ITD team as soon as the onboarding process is completed. A duty station will be assigned at ITD in East Hartford, with opportunities for hybrid remote work (3-days on-site and 2 days remote) and a work schedule of 40 hours per week. The position may be renewed periodically based upon a consultant's performance and the availability of funding. On-site attendance is mandatory on designated in-office days at the Judicial Branch Information Technology Division in East Hartford. The role also requires availability for after-hours on-call support as needed in the event of system emergencies, and occasional weekend work will be scheduled for system maintenance and upgrades.


ll qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status.