Cybersecurity Architect

SAIC•Santa Ana, CA

37d•Onsite

About The Position

SAIC is seeking a highly skilled Cybersecurity Architect to support the Orange County Sheriff’s Department (OCSD). This role involves providing technical leadership and oversight for OCSD’s cybersecurity initiatives to safeguard systems, assets, and data against cyber threats. Period of Performance: Contract valid until June 2027. 100%25 onsite 5 days a week

Requirements

BS in Cybersecurity or related technical field with 9+ years of relevant industry experience (4 years experience in lieu of degree)
Ability to obtain and maintain a public trust and pass a lifestyle polygraph we well requiring U.S. Citzenship.
Certifications: Certified Information Systems Security Professional (CISSP) or GIAC Reverse Engineering Malware (GREM) or equivalent.
Professional experience providing technical leadership in a Security Operations Center (SOC) or similar environment offering cybersecurity services.
Deep understanding of Palo Alto Networks architecture and technologies, including firewalls, intrusion prevention systems, and other security products.
Expertise in network security design, deployment, and maintenance.
Strong problem-solving skills with the ability to troubleshoot security issues and provide user support.
Excellent communication and interpersonal skills.
Project management experience with the capacity to manage multiple projects and meet deadlines under pressure.
Flexibility and willingness to work overtime, including weekends and overnight as needed.

Responsibilities

Design, implement, and maintain Palo Alto Network firewalls (NGFW), Panorama Central Management, and associated security services (Wildfire, Threat Prevention, URL Filtering, Anti-Virus, etc.).
Develop and enforce comprehensive security policies, rule sets, and zone segmentation aligned with Zero Trust principles.
Act as the top-tier subject matter expert for all Palo-Alto related security engineering, configuration, and troubleshooting.
Architect and optimize secure remote access solutions, utilizing Palo Alto GlobalProtect or similar enterprise VPN technologies, ensuring least privilege and multi-factor authentication (MFA) are implemented properly.
Develop and enforce security policies for both corporate and guest wireless networks, ensuring proper segmentation, secure authentication protocols, and encryption methods are in place.
Design and implement a secure DNS architecture utilizing DNSSEC or private DNS services.
Lead the design, tuning, and integration of device logs into an enterprise SIEM.
Develop advanced correlation rules, alerts, dashboards, and reporting mechanisms to identify, prioritize, and track security threats and anomalies.
Develop, maintain, and test the OCSD Incident Response Plan and playbooks.
Conduct post-incident reviews to identify architectural gaps and define security enhancements.
Ensure alignment with local, state, and federal mandates, specifically CJIS requirements, across all security architectures, policies, and procedures.
Create and maintain enterprise-wide security standards, control baselines, and reference architectures.
Conduct regular security assessments and define remediation strategies to address control deficiencies.