Cyber Security Engineer / Architect

Job Description

Job Description

Description

Client Title: Senior Cybersecurity Engineer for Orange County Sheriffs Department (OCSD)

Hourly Pay: 80-85/Hr depending on experience

Duration: 6 months contract to hire

TARGETED CONVERSION SALARY: 180k

Contract Role, potential to transition as FT employee, initial 12 months

County background checks required.

Interviews: The interview process will be an initial virtual SAIC technical panel followed by a second on-site interview with OCSD IT team. Final selection will be the OCSD second level acceptance interview.

Job Description:

We are seeking a Cybersecurity Architect to support the Orange County Sheriffs Department (OCSD) in Santa Ana, CA. The position entails providing expert technical leadership and oversight for the OCSD cybersecurity team, with a responsibility to protect OCSD assets, systems, and data against cyber threats. Primary responsibilities will be for the design, development and implementation of a robust and compliant enterprise-wide security architecture. Technical cyber services and expertise provided are associated with (but not limited to) endpoint and email security, firewall management, wireless security, virtual private technologies, and Incident Response with adherence to regulatory frameworks like CJIS. The following details specific duties and responsibilities for this position. The position will be 100% on-site with the OCSD Technology Division at 840 N. Eckhoff St., Suite 104, Orange, CA 92868.

Duties and Responsibilities:

Palo Alto Networks Platform Management:

Design, Implement and maintain Palo Alto Network firewalls (NGFW), Panorama Central Management and related security services (Wildfire, Threat Prevention, URL Filtering, Anti-Virus, etc.)

Develop and enforce high-level security policies, rule sets and zone segmentation to align with Zero Trust principles across the entire network.

Serve as the top-tier subject matter expert for all Palo-Alto related security engineering, configuration and troubleshooting.

Virtual Private Network technologies:

Architect and optimize secure remote access solutions leveraging solutions such as Palo Alto GlobalProtect or other enterprise VPN technologies ensuring least privilege and MFA requirements are enforced and properly implemented.

Wireless Infrastructure Security:

Develop and enforce security policies for corporate and guest wireless networks, ensuring segmentation, use of secure authentication protocols and encryption methodology.

DNS Security:

Design and implement secure DNS architecture utilizing DNSSEC or private DNS Services.

Security Information and Event Management:

Lead the design and tuning of the enterprise SIEM.

Lead the design and tuning of device log integration into enterprise SIEM.

Develop advanced correlation rules, alerts, dashboards and reporting to identify, prioritize and track security threats and anomalies.

Incident Response:

Develop, maintain and test the OCSD Incident Response Plan and playbooks.

Act as a lead resource during critical security incidents, providing technical expertise to guide the incident response lifecycle (Preparation, Detection, Containment, Eradication, Recovery, Lessons Learned)

Conduct post-incident reviews to identify architectural gaps and define immediate and long-term security enhancements.

Regulatory Compliance - Criminal Justice Information Services (CJIS)

Ensure all security architectures, policies and operational procedures strictly comply with local, state and federal mandates, specifically the CJIS requirements.

Create and maintain enterprise-wide security standards, security control baselines, and reference architecture to dictate how technology is securely implemented across the organization.

Conduct regular security assessments to identify control deficiencies and define remediation strategies.

Required Qualifications

Minimum Education/Experience:

BS in Cybersecurity or related technical field, 7+ years relevant industry experience,

or MS in Cybersecurity or related technical field, 5+ years relevant industry experience,

or PhD in Cybersecurity or related technical field with 4+ years industry experience.

Required Certifications: Certified Information Systems Security Professional (CISSP) or GIAC Reverse Engineering Malware (GREM) or similar.

Additional Qualifications:

Professional experience providing expert technical leadership in support of a Security Operations Center (SOC) or similar organization that provides cyber security services.

Strong understanding of Palo Alto Networks architecture and technologies. Expertise with Palo Alto Networks firewalls, intrusion prevention systems and other security products.

Experience with network security design, deployment, and maintenance.

Experience with troubleshooting security issues.

Experience with providing support to users.

Excellent communication and interpersonal skills.

Strong Project Management

Ability to work independently and as part of a team.

Ability to work under pressure and meet deadlines.

Ability to work overtime as requested.

Ability to work flexible hours including weekends and overnight

Ability to manage multiple projects simultaneously

Clearance

The selected applicant will be subject to the OCSD background check process as well as basic Live Scan background checks for SAIC. A polygraph exam may be required if deemed necessary during the background check.

Summary: The main function of a info security engineer is to plan, coordinate, and implement security measures for information systems to regulate access to computer data files and prevent unauthorized modification, destruction or disclosure of information. A typical info security engineer is responsible for planning, coordinating and implementing security measures to safeguard the computer database. Job Responsibilities: Identify security issues and risks, and develop mitigation plans Architect, design, implement, support, and evaluate security-focused tools and services including project leadership roles Develop and interpret security policies and procedures Participate in security compliance efforts Develop and deliver training materials and perform general security awareness and specific security technology training Evaluate and recommend new and emerging security products and technologies Qualifications: Bachelor's degree in a technical field such as computer science, computer engineering or related field required 10+ years experience required Strong experience and detailed technical knowledge in security engineering, system and network security, authentication and security protocols, cryptography, and application security Consistent implementation of security solutions Experience in infrastructure or application-level vulnerability testing and auditing

Skills

security, siem, Palo Alto, information security, cyber security

Top Skills Details

security,siem,Palo Alto,information security,cyber security

USPV+ REQUIREMENT: not required

Please have the Suppliers complete the following pre-interview screening questions and include along with current resume for all candidate submissions.

1. Have you consolidated multiple firewall vendors or devices? Please list vendor experiences.

2. Whats the largest or most complex network environment youve architected or secured?

3. Have you architected Zero Trust or network segmentation before? Please list vendor and security framework/standard.

4. Please list any firewall migrations or redesigns you have completed including platforms involved and challenges faced.

5. Please list VPN deployment experience (integration with ID providers, site-to-site, remote access, 3rd party vendor VPN connections, etc.)

6. Please list Wireless Security Experience (design and secure corporate wireless, IOC or BYOD)

7. Please list any projects for architecting Cybersecurity SIEM solutions.

8. Please list projects where you were responsible for overall security architecture including framework alignment.

9. Any experience with Cybersecurity architecting for CJIS, DOD or Federal government?

Experience Level

Expert Level

Job Type & Location

This is a Contract position based out of Orange, CA.

Pay and Benefits

The pay range for this position is $80.00 - $100.00/hr.

Individual compensation offered for this position within this range will depend on many factors, including qualifications, skills, relevant experience, job knowledge, geographic location, internal equity, and other pertinent job-related factors.

Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following: Medical, dental & vision Critical Illness, Accident, and Hospital 401(k) Retirement Plan Pre-tax and Roth post-tax contributions available Life Insurance (Voluntary Life & AD&D for the employee and dependents) Short and long-term disability Health Spending Account (HSA) Transportation benefits Employee Assistance Program Time Off/Leave (PTO, Vacation or Sick Leave)

Workplace Type

This is a fully onsite position in Orange,CA.

Application Deadline

This position is anticipated to close on Oct 12, 2026.

About TEKsystems

We're partners in transformation. We help clients activate ideas and solutions to take advantage of a new world of opportunity. We are a team of 80,000 strong, working with over 6,000 clients, including 80% of the Fortune 500, across North America, Europe and Asia. As an industry leader in Full-Stack Technology Services, Talent Services, and real-world application, we work with progressive leaders to drive change. That's the power of true partnership. TEKsystems is an Allegis Group company.

The company is an equal opportunity employer and will consider all applications without regards to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

About TEKsystems and TEKsystems Global Services

Were a leading provider of business and technology services. We accelerate business transformation for our customers. Our expertise in strategy, design, execution and operations unlocks business value through a range of solutions. Were a team of 80,000 strong, working with over 6,000 customers, including 80% of the Fortune 500 across North America, Europe and Asia, who partner with us for our scale, full-stack capabilities and speed. Were strategic thinkers, hands-on collaborators, helping customers capitalize on change and master the momentum of technology. Were building tomorrow by delivering business outcomes and making positive impacts in our global communities. TEKsystems and TEKsystems Global Services are Allegis Group companies. Learn more at TEKsystems.com.

The company is an equal opportunity employer and will consider all applications without regard to race, sex, age, color, religion, national origin, veteran status, disability, sexual orientation, gender identity, genetic information or any characteristic protected by law.

San Francisco Fair Chance Ordinance: Pursuant to the San Francisco Fair Chance Ordinance, for all positions located in the city and county of San Francisco, we will consider for employment qualified applicants with arrest and conviction records.

Massachusetts Lie Detector: It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.

Use of Artificial Intelligence (AI): We may use Artificial Intelligence (AI) to support parts of our hiring process, including sourcing, screening, and evaluating candidates. AI helps assess applications and qualifications, but final decisions are made by our hiring team. By applying, you acknowledge and agree that your application may be reviewed using AI tools.