Security Solutions Architect

Essential Duties and Responsibilities

• Determines security requirements by assessing business strategies and requirements, researching information security standards, conducting system security and vulnerability analyses and risk assessments, studying architecture/platform, and identifying integration points and issues
• Develops requirements and strategies to address information security needs and oversees projects through the implementation phase
• Works with the various information security team members and information technology teams to ensure changes to new or existing technologies are assimilated and functioning correctly
• Defines security requirements for information technologies and solutions
• Partners with other technical architects within the company to ensure consistency with enterprise architecture processes and practices
• Ensures that information security controls are designed and implemented to meet all regulatory and/or contractual requirements
• Research new and emerging technologies to evaluate technical trends and requirements
• Provides subject matter expertise and assists with collection of artifacts in support of internal and/or external compliance activities
• Develops and fosters strategic relationships and establishes key organizational partnerships
• Establishes collaborative working relationships with internal and external business partners and clients to ensure technology solutions align with security architecture and business strategy
• Performs other related duties as assigned

• Provide security architecture and technical security guidance to solution owners, with primary engagement across OCTO (AIA / Solution Architects) and Business Development teams
• Act as a technical ISO stakeholder in Enterprise Risk and Assurance activities
• Translate security requirements, standards, and controls into clear, actionable guidance for technical and non-technical stakeholders
• Identify architectural and solution-level security risks and collaborate with stakeholders to define appropriate mitigating controls
• Communicate upcoming initiatives, solution designs, and security or compliance considerations to ISO leadership
• Ensure proposed designs align with enterprise security standards, internal controls, and applicable regulatory requirements
• Document security architecture decisions, identified risks, and accepted exceptions to support audit and assurance activities
• Identify recurring architectural risk patterns and escalation of systemic issues to ISO leadership for remediation planning

• Please refer to the additional information section of the job requisition for this opening to determine clearance eligibility required.
• Bachelor's Degree in Computer Science, Information Systems, or the equivalent combination of education, training, or work experience
• Professional security certification such as CISSP or CCSP is desired
• Seven (7) or more years of experience in information technology
• Security Engineering or Security Architecture experience in a FEDERALLY focused environment is required.
• Federal compliance frameworks and regulatory requirements
• Enterprise level internal controls and security standards
• Compliance and assurance requirements across regulated environments
• Security architecture principles, patterns, and risk‑based design approaches
• Understanding of how business objectives, contracts, and regulatory obligations influence security architecture decisions
• Ability to communicate complex security concepts clearly to diverse audiences
• Ability to travel up to 10%, based on the business need.
• Must have experience with:
• NIST 800‑53 Security and Privacy Controls for Information Systems and Organizations
• NIST 800‑171 Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations
• NIST SP 800‑160v1r1 Engineering Trustworthy Secure Systems
• NIST SP 800‑218 Secure Software Development Framework (SSDF)
• NIST 800‑207 Zero Trust Architecture
• NIST 800‑128 Guide for Security‑Focused Configuration Management of Information Systems
• NIST 800‑58 Security Considerations for Voice Over IP Systems
• NIST 800‑39 Managing Information Security Risk:
  Organization, Mission, and Information System View
• N…