Enterprise Architecture and Security Operations Manager

Enterprise Architecture and Security Operations Manager

Join to apply for the Enterprise Architecture and Security Operations Manager role at Virginia Department of Environmental Quality

Hiring Range: $120,000 - $140,000

Full Time: Yes

Job Description: DEQ’s Office of Information Services seeks a senior technical leader to own the agency’s enterprise architecture and lead day‑to‑day security operations and infrastructure delivery. This role manages the Security Operations Analyst and the Enterprise Infrastructure Team, who are responsible for managing, maintaining, and administering all enterprise cloud and on‑premises virtual machine (VM) environments. The position ensures our technology landscape aligns with VITA architecture requirements, COV SEC
530 information security standards, modern security operations, and industry best practices. The role is accountable for creating and maintaining the Agency Technical Architecture Plan (TAP), which—together with OIS operational roadmaps and the IT project portfolio—forms a major component of the Agency’s IT Strategic Plan. Incumbent will establish and maintain architecture standards, develop and refine IT change management practices, and ensure OIS delivers against short‑term priorities and long‑term IT strategic plans and operational roadmaps—including future planning, migrations, and coordination with VITA/service towers—to achieve a secure, resilient, and modernized IT ecosystem that accelerates DEQ’s mission.

• Team Leadership & Operations Management
  • Directly manage the Security Operations Analyst and the Enterprise Infrastructure Team, including goal setting, coaching, performance management, staffing, and skills development.
  • Oversee day‑to‑day operations for enterprise infrastructure across cloud (OCI, Azure, and future AWS) and on‑premises VM platforms, ensuring availability, performance, cost management, and security.
  • Plan and execute platform and workload migrations, lifecycle upgrades, and capacity planning in partnership with application and system administrators.
  • Coordinate with VITA and service towers on provisioning, standards, incident escalation, and service improvements.
  • Collaborate and coordinate effectively and proactively with other key leaders within OIS including but not limited to the Dev Ops Manager(s), Analytics manager/lead, PMO Manager, agency ISO, and OIS Director.
• Enterprise Architecture Leadership
  • Define, publish, and maintain architecture principles, reference architectures, standards, and patterns (application, data, integration, infrastructure, and security).
  • Ensure alignment with VITA enterprise architecture requirements and statewide technology standards; review initiatives for compliance before funding and implementation.
  • Chair the OIS Architecture Review Board (ARB); facilitate solution design reviews and provide go/no‑go guidance and remediation paths.
  • Create and maintain as‑is and to‑be IT architecture roadmaps; ensure traceability to business capabilities and strategic goals. Collaborate with application and system administrators to execute roadmaps.
  • Author, publish, and maintain the Agency Technical Architecture Plan (TAP) as the authoritative blueprint for application, data, integration, infrastructure, and security domains; update at least annually with a 3‑year horizon that aligns with the agency IT Strategic Plan.
  • Run a semi‑annual TAP review cycle with stakeholder teams (Infrastructure, Dev Ops, Analytics, Security, Application teams, and VITA/service towers) to incorporate technology shifts, risk posture changes, and cost/performance targets.
  • Ensure the TAP explicitly links standards and reference architectures to operational roadmaps and the IT project portfolio, providing decision criteria for funding, sequencing, and technical debt retirement.
  • Integrate the TAP with the Architecture Review Board (ARB) process so new and existing initiatives demonstrate alignment prior to design and implementation.
• Security, Compliance & Risk
  • Lead day‑to‑day security operations through the Security Operations Analyst, including vulnerability management, identity, logging/monitoring, incident response, and control…