M365 Security Architect

About the Role We are seeking a Network Security Engineer to support the administration, modernization, and security of enterprise network infrastructure across multiple agency environments. In this role, you will be responsible for maintaining secure, compliant, and highly available network environments while supporting firewall operations, infrastructure upgrades, and cybersecurity initiatives. The ideal candidate will have hands-on experience with Palo Alto and Cisco ASA firewalls, strong networking fundamentals, and a passion for delivering secure and reliable network solutions. What You’ll Do Network Security Operations:

• Review, analyze, and implement firewall service requests, incident tickets, and change requests.
• Troubleshoot and resolve network security issues in production environments.
• Monitor and maintain firewall policies, access controls, and security configurations.
• Participate in operational support activities to ensure network availability and security.

Infrastructure Lifecycle Management:

• Support the refresh and replacement of end-of-life (EOL) networking and security hardware.
• Assist in planning and executing infrastructure modernization initiatives.
• Ensure seamless migration and deployment of updated network security technologies.

Compliance & Security Governance:

• Implement and maintain security controls aligned with regulatory and industry compliance requirements, including IRS, FBI, CJIS, and other applicable standards.
• Support security audits, risk assessments, and remediation activities.
• Maintain documentation and follow established security governance processes.

Firewall Administration:

• Configure, manage, and troubleshoot Palo Alto Networks and Cisco ASA firewalls.
• Create and maintain security policies, NAT rules, VPN configurations, and threat prevention settings.
• Perform firewall upgrades, rule reviews, and optimization activities.

• Experience administering Palo Alto Networks firewalls in enterprise environments.
• Experience configuring and troubleshooting Cisco ASA firewalls.
• Understanding of network security concepts and firewall technologies.
• Knowledge of routing, switching, subnetting, VPN technologies, and TCP/IP networking.
• Familiarity with the OSI model and general network troubleshooting methodologies.
• Experience with change management and incident response processes.

Preferred Qualifications

• Experience with Site-to-Site VPN implementation and support.
• Knowledge of Next-Generation Firewall (NGFW) technologies and security best practices.
• Familiarity with threat prevention, intrusion prevention, and network segmentation.
• Experience supporting compliance-driven environments.
• Relevant industry certifications such as PCNSA, PCNSE, CCNA, CCNP Security, Security+, or equivalent.

Key Technical Skills

• Palo Alto Networks
• Security Zones
• Security Policies
• Site-to-Site VPNs
• Network Address Translation (NAT)
• Basic Threat Prevention
• Policy Management and Troubleshooting
• Cisco ASA Firewall Configuration
• Access Control Management
• Troubleshooting and Support
• Rule Administration
• VPN Management
• Networking Fundamentals
• Routing Protocols
• Subnetting
• TCP/IP
• VPN Technologies
• OSI Model
• Network Troubleshooting