Senior Security Architect ; Architecture Reviews, Threat Modeling, Solution Architectures

Description

Contingent Upon Contract Award

Remote with occasional on-site support

Connected Logistics is seeking a Senior Security Architect to support the Cybersecurity Architecture and Engineering Services supporting the Department of Veterans Affairs (VA) Office of Information Security (OIS) Cybersecurity Operations Systems Engineering (COSE) program
.

Senior Security Architect I serves as a senior cybersecurity technical lead responsible for designing, assessing, and strengthening security architectures across enterprise applications, platforms, networks, and cloud environments. The role conducts architecture reviews, performs threat modeling, develops secure solution architectures, and ensures cybersecurity requirements are incorporated throughout the system and solution lifecycle. The Senior Security Architect I evaluates existing security architectures, identifies vulnerabilities and architectural risks, and develops practical security controls and design recommendations to protect organizational systems, networks, applications, and data from cyber threats and unauthorized access.

The role works closely with solution architects, system engineers, cybersecurity teams, development teams, and program stakeholders to ensure that proposed and existing solutions meet applicable security requirements and align with organizational security standards and risk management objectives.

• Lead and perform cybersecurity architecture reviews for enterprise systems, applications, infrastructure, cloud services, networks, and technology solutions.
• Develop and document secure solution architectures that integrate cybersecurity requirements, security controls, and risk mitigation measures into the overall technical design.
• Conduct threat modeling and security design analysis to identify attack paths, threats, vulnerabilities, trust boundaries, and security risks before solution implementation.
• Evaluate existing cybersecurity architectures, controls, technologies, and protocols to identify security gaps and recommend improvements.
• Define security architecture requirements for hardware, software, network, application, data, identity, and cloud platforms.
• Review proposed solution designs, system integrations, interfaces, and data flows to identify architectural security concerns and recommend appropriate safeguards.
• Develop security architecture artifacts, technical recommendations, diagrams, patterns, standards, and design guidance supporting solution implementation.
• Ensure cybersecurity considerations are incorporated throughout the system development and solution lifecycle, from initial design through implementation and modernization.
• Provide cybersecurity technical leadership and guidance to solution architects, engineers, developers, security teams, and other technical stakeholders.
• Assess new and emerging technologies for potential cybersecurity risks, architectural impacts, and integration requirements.
• Support the design and implementation of upgrades and improvements to existing cybersecurity capabilities, controls, and security architectures.
• Identify cybersecurity risks and develop appropriate architectural mitigation strategies to reduce organizational and technical risk.
• Support security engineering activities associated with system modernization, cloud adoption, application transformation, and enterprise technology initiatives.
• Communicate security architecture findings, risks, recommendations, and design decisions to both technical and program stakeholders.

• Public Trust: T4 or T5 (TS)
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Information Systems, or a related technical discipline or an Associate's degree in the above discipline with an additional 2 years of experience.
• Minimum of 10 years of relevant professional experience in cybersecurity, security engineering, security architecture, information technology, or a closely related field.
• Demonstrated experience designing, evaluating, and implementing cybersecurity architectures for complex IT environments.
• Experience conducting security architecture reviews, threat modeling, and solution architecture assessments.
• Experience identifying cybersecurity risks, architectural weaknesses, and security control gaps and developing appropriate mitigation recommendations.
• Strong understanding of enterprise security concepts spanning applications, networks, infrastructure, identity, data, and cloud technologies.
• Ability to…