SR. Security Architect

Senior Cybersecurity Architect Job Number: 26-00451 Use your skills where innovative technology solutions begin. ECLARO is looking for a Senior Cybersecurity Architect for our client in Orange, CA. ECLARO’s client is a leading technology solutions provider, collaborating with customers to manage their needs and achieve success in their business goals. If you’re up to the challenge, then take a chance at this rewarding opportunity!

Position Overview:

Position entails providing expert technical leadership and oversight for the cybersecurity team, with a responsibility to protect assets, systems, and data against cyber threats. Primary responsibilities will be for the design, development and implementation of a robust and compliant enterprise-wide security architecture. Technical cyber services and expertise provided are associated with (but not limited to) endpoint and email security, firewall management, wireless security, virtual private technologies, and Incident Response with adherence to regulatory frameworks like CJIS.

The main function of an info security engineer is to plan, coordinate, and implement security measures for information systems to regulate access to computer data files and prevent unauthorized modification, destruction or disclosure of information. A typical info security engineer is responsible for planning, coordinating and implementing security measures to safeguard the computer database. Pay Rate: $85.00 - $90.00/Hour Responsibilities:
Identify security issues and risks, and develop mitigation plans Architect, design, implement, support, and evaluate security-focused tools and services including project leadership roles Develop and interpret security policies and procedures Participate in security compliance efforts Develop and deliver training materials and perform general security awareness and specific security technology training Evaluate and recommend new and emerging security products and technologies Palo Alto Networks Platform Management:
Design, Implement and maintain Palo Alto Network firewalls (NGFW), Panorama Central Management and related security services (Wildfire, Threat Prevention, URL Filtering, Anti-Virus, etc.) Develop and enforce high-level security policies, rule sets and zone segmentation to align with Zero Trust principles across the entire network. Serve as the top-tier subject matter expert for all Palo-Alto related security engineering, configuration and troubleshooting.

Virtual Private Network technologies:
Architect and optimize secure remote access solutions leveraging solutions such as Palo Alto Global Protect or other enterprise VPN technologies ensuring least privilege and MFA requirements are enforced and properly implemented. Wireless Infrastructure Security:
Develop and enforce security policies for corporate and guest wireless networks, ensuring segmentation, use of secure authentication protocols and encryption methodology. DNS Security:
Design and implement secure DNS architecture utilizing DNSSEC or private DNS Services. Security Information and Event Management:
Lead the design and tuning of the enterprise SIEM. Lead the design and tuning of device log integration into enterprise SIEM. Develop advanced correlation rules, alerts, dashboards and reporting to identify, prioritize and track security threats and anomalies. Incident Response:
Develop, maintain and test the Incident Response Plan and playbooks. Act as a lead resource during critical security incidents, providing technical expertise to guide the incident response lifecycle (Preparation, Detection, Containment, Eradication, Recovery, Lessons Learned) Conduct post-incident reviews to identify architectural gaps and define immediate and long-term security enhancements. Regulatory Compliance - Criminal Justice Information Services (CJIS):
Ensure all security architectures, policies and operational procedures strictly comply with local, state and federal mandates, specifically the CJIS requirements. Create and maintain enterprise-wide security standards, security control baselines, and reference architecture to dictate how technology is securely implemented across the…