Complete Description:
Supporting an organization’s key business processes and organizational mission. Provides the interface between the Enterprise Architect and the Information System Security Engineering as detailed in NIST SP 800-37. Architects counter-measures to contain, control and recover from dynamic cyber security events. Uses knowledge about current threats to identify flaws and weaknesses in the composition of system designs and defenses for the mission and mission critical data. Specifies solutions and verifies solutions that have been implemented. Rapidly adjusts designs based on new defense, threat, and attack information.
Specific Tasks
Work involves the analysis, planning, design, implementation, documentation, assessment, and management of the enterprise structural framework to align IT strategy, plans, and systems with the mission, goals, structure, and processes of the organization.
• Develop enterprise security architecture for the district.
• Work closely with cross-functional teams and provide final review of all designs.
• Understand current as well as emerging security threats. Identify security architecture capabilities and design security architecture patterns to mitigate threats.
• Document and address organization's information security, information assurance (IA) architecture, and systems security engineering requirements throughout the acquisition lifecycle.
• Ensure all definition and architecture activities (e.g., system lifecycle support plans, concept of operations, operational procedures and maintenance training materials) are properly documented and updated as necessary.
• Develop and maintain security standards including, but not limited to, network infrastructure, wireless and mobile infrastructure, operating systems, databases, applications, and emerging technologies.
• Assess emerging technologies against security architecture to determine where they fill gaps, overlap with existing solutions or extend capabilities.
• Serve as information security subject matter expert; provide advisory and consulting services as needed.
• Review existing and proposed architectures, identify security design gaps, and recommend changes or enhancements.
• Participate in solution architecture design; lead security efforts assisting with the integration and initial implementation of solutions.
• Perform security reviews, identify gaps in security architecture, and develop a security risk management plan.
Skill
Required / Desired
Amount
of Experience
Expertise Rating
Knowledge of network security architecture concepts, including topology, protocols, components, and principles (e.g., application of defense-in-depth
Required
5
Years
3 - Expert
Knowledge of defense-in-depth principles and network security architecture
Required
8
Years
3 - Expert
Knowledge of organization's enterprise information security architecture system.
Required
5
Years
3 - Expert
Knowledge of the enterprise IT architecture
Required
13
Years
3 - Expert
Knowledge of communication methods, principles, and concepts that support the network infrastructure
Required
5
Years
3 - Expert
Knowledge of the organization’s enterprise IT goals and objectives
Desired
5
Years
Skill in implementing the methods, standards, and approaches for describing, analyzing, and documenting an organization's enterprise IT architecture
Required
5
Years
Knowledge of engineering concepts
Required
5
Years
Knowledge of system design tools, methods, and techniques, including automated systems analysis and design tools
Required
8
Years
Skill in integrating and supporting information system security architecture
Required
8
Years
CISSP, CISM or similar certification desired
Desired
Undergraduate degree in Computer Science, Information Technology, or related field
Required