Cyber Security Engineer / Architect

TEKsystems•Orange, CA

1d•$80 - $100•Onsite

About The Position

We are seeking a Cybersecurity Architect to support the Orange County Sheriffs Department (OCSD) in Santa Ana, CA. The position entails providing expert technical leadership and oversight for the OCSD cybersecurity team, with a responsibility to protect OCSD assets, systems, and data against cyber threats. Primary responsibilities will be for the design, development and implementation of a robust and compliant enterprise-wide security architecture. Technical cyber services and expertise provided are associated with (but not limited to) endpoint and email security, firewall management, wireless security, virtual private technologies, and Incident Response with adherence to regulatory frameworks like CJIS. The position will be 100% on-site with the OCSD Technology Division at 840 N. Eckhoff St., Suite 104, Orange, CA 92868.

Requirements

BS in Cybersecurity or related technical field, 7+ years relevant industry experience, or MS in Cybersecurity or related technical field, 5+ years relevant industry experience, or PhD in Cybersecurity or related technical field with 4+ years industry experience.
Certified Information Systems Security Professional (CISSP) or GIAC Reverse Engineering Malware (GREM) or similar.
Professional experience providing expert technical leadership in support of a Security Operations Center (SOC) or similar organization that provides cyber security services.
Strong understanding of Palo Alto Networks architecture and technologies. Expertise with Palo Alto Networks firewalls, intrusion prevention systems and other security products.
Experience with network security design, deployment, and maintenance.
Experience with troubleshooting security issues.
Experience with providing support to users.
Excellent communication and interpersonal skills.
Strong Project Management
Ability to work independently and as part of a team.
Ability to work under pressure and meet deadlines.
Ability to work overtime as requested.
Ability to work flexible hours including weekends and overnight
Ability to manage multiple projects simultaneously
Bachelor's degree in a technical field such as computer science, computer engineering or related field required
10+ years experience required
Strong experience and detailed technical knowledge in security engineering, system and network security, authentication and security protocols, cryptography, and application security
Consistent implementation of security solutions
Experience in infrastructure or application-level vulnerability testing and auditing

Nice To Haves

County background checks required.
The interview process will be an initial virtual SAIC technical panel followed by a second on-site interview with OCSD IT team. Final selection will be the OCSD second level acceptance interview.

Responsibilities

Design, Implement and maintain Palo Alto Network firewalls (NGFW), Panorama Central Management and related security services (Wildfire, Threat Prevention, URL Filtering, Anti-Virus, etc.)
Develop and enforce high-level security policies, rule sets and zone segmentation to align with Zero Trust principles across the entire network.
Serve as the top-tier subject matter expert for all Palo-Alto related security engineering, configuration and troubleshooting.
Architect and optimize secure remote access solutions leveraging solutions such as Palo Alto GlobalProtect or other enterprise VPN technologies ensuring least privilege and MFA requirements are enforced and properly implemented.
Develop and enforce security policies for corporate and guest wireless networks, ensuring segmentation, use of secure authentication protocols and encryption methodology.
Design and implement secure DNS architecture utilizing DNSSEC or private DNS Services.
Lead the design and tuning of the enterprise SIEM.
Lead the design and tuning of device log integration into enterprise SIEM.
Develop advanced correlation rules, alerts, dashboards and reporting to identify, prioritize and track security threats and anomalies.
Develop, maintain and test the OCSD Incident Response Plan and playbooks.
Act as a lead resource during critical security incidents, providing technical expertise to guide the incident response lifecycle (Preparation, Detection, Containment, Eradication, Recovery, Lessons Learned)
Conduct post-incident reviews to identify architectural gaps and define immediate and long-term security enhancements.
Ensure all security architectures, policies and operational procedures strictly comply with local, state and federal mandates, specifically the CJIS requirements.
Create and maintain enterprise-wide security standards, security control baselines, and reference architecture to dictate how technology is securely implemented across the organization.
Conduct regular security assessments to identify control deficiencies and define remediation strategies.
Plan, coordinate, and implement security measures for information systems to regulate access to computer data files and prevent unauthorized modification, destruction or disclosure of information.
Identify security issues and risks, and develop mitigation plans
Architect, design, implement, support, and evaluate security-focused tools and services including project leadership roles
Develop and interpret security policies and procedures
Participate in security compliance efforts
Develop and deliver training materials and perform general security awareness and specific security technology training
Evaluate and recommend new and emerging security products and technologies