Security Architect

Complete Description:

·         The Enterprise Architect will also be tasked with preparing security standards, policies and procedures – as well as mentoring team members and executive staff on security matters. CISSP REQUIRED.

·         The department is seeking an Enterprise Architect to work in conjunction with the Modernization Team, as well as the DHS Information Security and Privacy Office, to analyze and document the existing information security environment.

·         Conducting system security and vulnerability analyses and risk assessments

·         Evaluating the systems architecture and identifying integration issues

·         Serve as Information Security Subject Matter Expert (SME), while working with a Systems Integrator and software vendors, to develop the approach for implementing an enterprise security infrastructure that ensures compliance to standards, policies and procedures

·         Monitor delivery efforts to ensure compliance to standards, policies, and procedures

·         Deliver evidence, demonstrating project deliverables meet federal certification requirements

·         Improves DHS Incident Response efforts by analyzing existing systems/processes and recommending future technologies and associated processes

·         Participate in the RFI/RFP process for systems module selection

·         Participate in the procurement process to select a Systems Integrator to execute the DDI phase

·         CISSP certification REQUIRED

·         Extensive experience designing and implementing enterprise security architectures based on NIST Risk Management Framework (NIST 800-53), state and federal security standards, and security industry best practices

·         An extensive understanding of security tools and software products, including Identity Access Management (IAM), Security Incident and Event Management (SIEM), and Cloud Access Security Brokers (CASB)

·         In-depth experience in creating, documenting, and implementing enterprise security policies and standards – including enterprise-wide communication and training