Job Details

The State of Wisconsin is looking for a Technical Architect - III

Candidate MUST be a WI resident.

The District Attorney IT Program (DAIT) is recruiting for a Technical Architect III to fill an important technical and business role on the team. This is an exciting opportunity to adapt your experience to evolve and support our infrastructure, application, process, and security architectures.

Position Summary:

Design, implement, and support the organization's IT infrastructure. Provide architectural frameworks for information systems, security, and application delivery. Understand user and process requirements and ensure those requirements can be achieved through high quality deliverables. Align development plans to ensure effective integrations and automations among systems and the IT infrastructure. Monitor technological advancements to ensure continuous improvement and alignment with standards and emerging business requirements. Understand the interactions, data flows, and security between systems and services within the environment, and evaluate the operational impact of changes. Analyze and test systems to ensure performance, reliability, security, and scalability are aligned with standards. Maintain documentation while developing operational frameworks and proposals. This position requires multiple disciplines with experience in cloud services, on premises datacenters, networking, data, communications, security, storage platforms, and system performance. Combined with technical expertise, this position requires frequent team and customer consultations on technical configurations and escalated requests, all contributing to the effective use of the architecture to enable the Bureau's business goals.

DAIT supports core business applications, infrastructure, networking, computer, storage, data, and security solutions for the State of Wisconsin's 71 District Attorney offices. DAIT develops, maintains, and enhances the District Attorney's office's case management software, PROTECT. This system is mission-critical for secure communications and paperless workflows in DA offices and integrates data from various State justice partners. PROTECT's modernization, which is currently underway, is a major project and will be an important collaboration in this position's work portfolio.

Position's skill requirements with a minimum of 7 to 10 years of experience.

• Design, build, administer, support, and secure on premises and cloud hosting environments.
• WAN / LAN configurations using Cisco routers and switches. QoS, NAT, routing, split tunneling, static routes, EIGRP, and 802.1x.
• Firewall configuration, management, and support. Including firewall clusters, router-based firewalls, and VPN concentrators.
• Cybersecurity skills, including knowledge of Zscaler and CrowdStrike.
• Network monitoring tracking uptime, latency, and throughput. Analyze trends to build cases for change to enhance performance, scalability, and security.
• Create and maintain documentation of detailed design specifications for technology solutions that meet budget, scalability, and performance requirements.
• Azure and AWS configuration, management, and support.
• Conduct periodic risk analyses on systems and workflows to ensure compliance and policy levels are maintained.
• Evaluate and recommend new and emerging technologies, tools, and frameworks and assess their

suitability for the bureau's budget, ROI, and business requirements.

• Collaborate with DAIT team and customers to present proposals, provide escalated support, and gather feedback to build knowledge of priorities.
• Strong communication skills, including verbal phone/video) and written (email) with team members and stakeholders.

Example Responsibilities:

• Designing and Planning:

• Design an approved data integration that effectively benefits all customers. Collaborate with the

development team to recommend an implementation methodology and ensure the data set being integrated meets all applicable security requirements. Recommend testing and performance routines and documentation details.

• Plan a multi-site network infrastructure change designed to improve bandwidth and cybersecurity and enable a cloud-based storage gateway for long term data archiving. Work with the PROTECT application team to evaluate performance outcomes and make recommendations where applicable.

• Execution and Installation:

• Project manage a multi-site infrastructure change that includes multiple router upgrades, split tunneling. configurations, and select on-site servers for local and CJIS compliant data storage. Test to confirm that all hardware and software changes fully meet the customer's expectations and DAIT's. Ensure all CJIS compliant data is encrypted during transit and at rest. Configure role-level access to support least privileged access to the environment and applications.

• Operations and Support:

• Perform broad network performance and reliability monitoring. Trend the captured data to build a case for increased service levels derived from locations with network bandwidth and latency constraints. Prioritize recommendations based on available service options and budget. Where service updates are unavailable, recommend solutions that measurably improve performance and the user experience.
• Be a subject matter expert on escalated tickets from the help desk. Include the customer in all relevant

communications and document resolutions on the support ticket.

• Security:

• Implement routine evaluations of available and adopted cybersecurity solutions. Stay current with

implemented feature sets and configurations and present recommendations to DAIT that support change benefits and ROI.

• Configure, manage, support, and test systems that interact with and store CJIS data. Ensure that all related systems maintain compliance with CJIS security standards. Document design and implementation of the secure solution and represent DAIT on CJIS audits.

At least 5 years of experience:

• Experience with WAN / LAN configurations using Cisco routers and switches. QoS, NAT, routing, split tunneling, static routes, EIGRP, and 802.1x.
• Experience with Firewall configuration, management, and support. Including firewall clusters, router-based firewalls, and VPN concentrators.
• Cybersecurity skills, including knowledge of Zscaler and CrowdStrike.
• Experience with Network monitoring tracking uptime, latency, and throughput. Analyze trends to build cases for change to enhance performance, scalability, and security.

Nice to Have Skills:

• Experience with cloud and on-premises based authentication, SSO, and implementing role-based security configurations.
• Experience with data security, governance, and education practices.
• Experience with scripting, version control, testing, containerization, and orchestration.

Strongly Preferred Skills:

• Planning and executing technical projects, including change management, communication, and quality assurance.
• Experience with cloud and on-premises based authentication, SSO, and implementing role-based security configurations.
• CJIS data compliance requirements.
• Experience with data security, governance, and education practices.
• Experience with scripting, version control, testing, containerization, and orchestration.

Interview Process:

• Teams with camera on. 2nd round if necessary.

Duration of the Contract:

• 06/30/2024 with extensions.

Onsite or Remote?

• This position can work 100% remote (within the state of WI) or in the office.
• Candidate MUST be a WI resident or willing to relocate to WI at their own expense prior to starting the role.