Network Security Architect

Quantam Solutions provides IT solutions and consulting for various clients. We offer competitive hourly wages, health benefits, paid time off, and a 401(k) plan. We are currently seeking a Solution Architect – Cybersecurity & Network Security. This position offers a hybrid work schedule with three days onsite in East Hartford, CT, and two days remote.

Project Description:

Our client is seeking an experienced Solution Architect to support cybersecurity, firewall, network security, and compliance initiatives within a highly complex IT environment supporting mission-critical systems.

The successful candidate will provide senior-level cybersecurity expertise and will be responsible for designing, assessing, hardening, and securing enterprise infrastructure while ensuring compliance with applicable cybersecurity standards, including CJIS Security Policy, NIST SP 800-53 Rev. 5, and IRS Publication 1075.

This position will also provide technical leadership for Palo Alto and Cisco security technologies, assist with Secure Access Service Edge (SASE) initiatives, perform comprehensive security assessments, and develop remediation strategies designed to strengthen the organization's overall security posture.

Scope of Services:

• Design, implement, administer, and optimize Palo Alto Networks firewalls, Panorama, GlobalProtect, Prisma Access, and ION appliances.
• Implement and harden Cisco networking and security infrastructure.
• Harden Palo Alto and Cisco infrastructure in accordance with CJIS Security Policy, NIST SP 800-53 Rev. 5, IRS Publication 1075, and cybersecurity best practices.
• Perform security assessments of firewalls, Microsoft Azure environments, network infrastructure, enterprise applications, and supporting systems.
• Develop Plans of Action and Milestones (POA&Ms) based on security assessment findings and provide recommendations for remediation.
• Review firewall rule bases, network segmentation, VPN configurations, routing, and remote-access architectures to ensure security and compliance.
• Assist with the design and deployment of Palo Alto Prisma Access and ION appliances supporting remote-office connectivity and Secure Access Service Edge (SASE) initiatives.
• Evaluate Microsoft Azure networking and security configurations to ensure secure integration within hybrid infrastructure environments.
• Design, implement, and optimize Azure ExpressRoute, network routing, and Palo Alto cloud firewall connectivity.
• Conduct cybersecurity risk assessments and configuration reviews against applicable security and compliance standards.
• Work closely with infrastructure, networking, cloud, and application teams to identify and remediate security findings.
• Assist with cybersecurity audit preparation and support regulatory compliance assessments.
• Develop technical documentation, architecture diagrams, security assessment reports, remediation documentation, and executive summaries.
• Present technical findings and recommendations to both technical and executive stakeholders.

Minimum Qualifications:

• 8+ years of expert-level, hands-on experience with Cisco networking and security technologies.
• 6+ years of expert-level, hands-on experience with Palo Alto Networks firewalls and security platforms.
• Demonstrated experience implementing cybersecurity best practices within highly available enterprise environments.
• Expert knowledge of Palo Alto Networks NGFW, Panorama, GlobalProtect, Prisma Access, and ION appliances.
• Expert knowledge of Cisco routing, switching, VPN, firewall, and network security technologies.
• Experience hardening enterprise network infrastructure in accordance with cybersecurity and regulatory standards.
• Experience working with CJIS Security Policy, NIST SP 800-53 Rev. 5, IRS Publication 1075, or comparable cybersecurity frameworks and standards.
• Experience performing cybersecurity risk assessments and developing Plans of Action and Milestones (POA&Ms).
• Experience performing firewall, network, Azure, and application security assessments.
• Strong understanding of Zero Trust architecture, network segmentation, secure remote access, and Secure Access Service Edge (SASE).
• Experience securing Microsoft Azure networking and cloud infrastructure.
• Experience reviewing and optimizing firewall policies, VPN configurations, network routing, and segmentation.
• Strong written and verbal communication skills.
• Ability to prepare detailed technical documentation and present cybersecurity findings to both technical and executive audiences.

Preferred Qualifications:

• Palo Alto Networks security certifications.
• Cisco networking or security certifications.
• CISSP, CISM, or equivalent cybersecurity certification.

Additional Information:

• Anticipated contract duration is two years, contingent upon funding.
• This position offers a hybrid work schedule with three days onsite in East Hartford, CT, and two days remote.
• Onsite attendance is mandatory on designated in-office days.
• The work schedule is 40 hours per week.
• The selected candidate may begin once the required onboarding process has been completed.
• After-hours on-call availability is required as needed for system emergencies.
• Occasional weekend work will be required for scheduled system maintenance and upgrades.
• The position may be renewed periodically based on performance and the availability of funding.