Solutions Architect

Overview

The State of Connecticut Judicial Branch is seeking a Solution Architect for the Information Technology Cybersecurity unit to support the Branch's cybersecurity, firewall, network security, and compliance initiatives. This is a highly complex IT environment supporting mission‑critical systems that require senior‑level cybersecurity expertise. The successful candidate will be responsible for designing, assessing, hardening, and securing the Judicial Branch's infrastructure while ensuring compliance with CJIS Security Policy, NIST SP 800‑53 Rev. 5,

IRS Publication 1075, and other applicable cybersecurity standards.

• Expert‑level design, implementation, administration, and optimization of Palo Alto Networks firewalls, Panorama, Global Protect, Prisma Access, and ION appliance.
• Expert‑level implementation, hardening of Cisco networking and security infrastructure.
• Perform security hardening of Palo Alto and Cisco infrastructure in accordance with CJIS Security Policy, NIST SP 800‑53 Rev. 5, and IRS Publication 1075.
• Perform security assessments of firewalls, Azure environments, network infrastructure, enterprise applications, and supporting systems.
• Develop Plans of Action and Milestones (POA&Ms) based on assessment findings and provide remediation recommendations.
• Review firewall rule bases, network segmentation, VPN configurations, routing, and remote access architectures to ensure security and compliance.
• Assist with the design and deployment of Palo Alto Prisma Access and ION appliances supporting remote office connectivity and Secure Access Service Edge (SASE).
• Evaluate Azure networking and security configurations to ensure secure integration with hybrid infrastructure.
• Design, implement, and optimize Azure Express Route, routing, and Palo Alto cloud firewall connectivity for secure hybrid environment.
• Perform risk assessments and configuration reviews against CJIS Security Policy, NIST SP 800‑53 Rev. 5, IRS Publication 1075, and Judicial Branch security standard.
• Work closely with infrastructure, networking, cloud, and application teams to remediate security findings.
• Assist with audit preparation and support for CJIS, IRS, and other regulatory compliance assessment.
• Develop technical documentation, architecture diagrams, assessment reports, and executive summary.

• 8+ years of expert‑level hands‑on experience with Cisco networking and security technology.
• 6+ years of expert‑level hands‑on experience with Palo Alto Networks firewalls and security platforms.
• Demonstrated experience implementing cybersecurity best practices within highly available enterprise environments.

• Expert knowledge of Palo Alto Networks NGFW, Panorama, Global Protect, Prisma Access, and ION applications.
• Expert knowledge of Cisco routing, switching, VPN, firewall, and network security technologies.
• Experience hardening network infrastructure to CJIS Security Policy, NIST SP 800‑53 Rev. 5, IRS Publication 1075, and security best practices.
• Experience performing cybersecurity risk assessments and developing POA&Ms.
• Experience performing firewall, network, Azure, and application security assessments.
• Strong understanding of Zero Trust architecture, network segmentation, secure remote access, and Secure Access Service Edge (SASE).
• Experience securing Microsoft Azure networking and cloud infrastructure.
• Experience reviewing firewall policies, VPN configurations, routing, and network segmentation.
• Excellent written and verbal communication skills.
• Experience preparing technical documentation and presenting findings to technical and executive audiences.
• Palo Alto Networks and Cisco security certifications are highly desirable.
• CISSP, CISM, or equivalent cybersecurity certification is preferred.