Security Solutions Architect

Essential Duties and Responsibilities

• Determines security requirements by assessing business strategies and requirements, researching information security standards, conducting system security and vulnerability analyses, and performing risk assessments
• Develops requirements and strategies to address information security needs and oversees projects through the implementation phase
• Works with the various information security team members and information technology teams to ensure changes to new or existing technologies are assimilated and functioning correctly
• Defines security requirements for information technologies and solutions
• Partners with other technical architects within the company to ensure consistency with enterprise architecture processes and practices
• Ensures that information security controls are designed and implemented to meet all regulatory and/or contractual requirements
• Researches new and emerging technologies to evaluate technical trends and requirements
• Provides subject‑matter expertise and assists with collection of artifacts in support of internal and/or external compliance activities
• Develops and fosters strategic relationships and establishes key organizational partnerships
• Establishes collaborative working relationships with internal and external business partners and clients to ensure that technology solutions align with security architecture and business strategy
• Performs other related duties as assigned

• Provide security architecture and technical security guidance to solution owners, with primary engagement across OCTO (AIA / Solution Architects) and Business Development teams
• Act as a technical ISO stakeholder in Enterprise Risk and Assurance activities
• Translate security requirements, standards, and controls into clear, actionable guidance for technical and non‑technical stakeholders
• Identify architectural and solution‑level security risks and collaborate with stakeholders to define appropriate mitigating controls
• Communicate upcoming initiatives, solution designs, and security or compliance considerations to ISO leadership
• Ensure proposed designs align with enterprise security standards, internal controls, and applicable regulatory requirements
• Document security architecture decisions, identified risks, and accepted exceptions to support audit and assurance activities
• Identify recurring architectural risk patterns and elevate systemic issues to ISO leadership for remediation planning

• Refer to the additional information section of the job requisition to determine clearance eligibility required
• Bachelor’s Degree in Computer Science, Information Systems, or the equivalent combination of education, training, or work experience
• Professional security certification such as CISSP or CCSP is desired
• Seven (7) or more years of experience in information technology
• Security Engineering or Security Architecture experience in a federally focused environment is required
• Federal compliance frameworks and regulatory requirements
• Enterprise‑level internal controls and security standards
• Compliance and assurance requirements across regulated environments
• Security architecture principles, patterns, and risk‑based design approaches
• Understanding of how business objectives, contracts, and regulatory obligations influence security architecture decisions
• Ability to communicate complex security concepts clearly to diverse audiences
• Ability to travel up to 10% based on business need

• NIST 800‑53 Security and Privacy Controls for Information Systems and Organizations
• NIST 800‑171 Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations
• Other preferred NIST 800 Series experience: NIST SP 800‑160v1r1 Engineering Trustworthy Secure Systems; NIST SP 800‑218 Secure Software Development Framework (SSDF); NIST 800‑207 Zero Trust Architecture; NIST 800‑128 Guide for Security‑Focused Configuration Management of Information Systems; NIST 800‑58 Security Considerations for Voice Over IP Systems; NIST 800‑39 Managing Information Security Risk:
  Organization, Mission, and Information System View; NIST 800‑37 Risk Management Framework for…