Security Architect – Mid

Koniag Data Solutions, LLC, a Koniag Government Services company, is seeking a Security Architect – Mid to support KDS and our government customer in Washington, DC. This position requires the candidate to be able to obtain a Public Trust.

We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more.

Koniag Data Solutions, a Koniag Government Services company, is seeking a skilled Mid-Level Security Architect to support the U.S. Small Business Administration (SBA). The ideal candidate is an experienced cybersecurity professional with a solid foundation in security architecture design, risk management, and the implementation of security controls across federal enterprise IT environments. This individual will work collaboratively with the Senior Cybersecurity Architect, SBA IT teams, system owners, and key stakeholders to support the design, documentation, and implementation of security architectures that protect SBA's systems, networks, and data assets while enabling the agency's mission.

The Mid-Level Security Architect will support the design, development, and implementation of enterprise security architectures and solutions in alignment with SBA's cybersecurity strategy, mission requirements, and applicable federal security policies and frameworks. Working under the direction of the Senior Cybersecurity Architect, this individual will contribute meaningfully to architecture design activities, security assessments, and the integration of security requirements across SBA's technology landscape.

• Support the development and maintenance of SBA's enterprise cybersecurity architecture, contributing to the creation, review, and updating of reference architectures, security design patterns, architecture decision records (ADRs), technical security roadmaps, and supporting architecture documentation.
• Assist in the design and implementation of security architectures for on-premises, cloud, and hybrid IT environments, ensuring security controls and requirements are appropriately integrated throughout the system development lifecycle (SDLC) and that new and existing systems meet SBA's security architecture standards.
• Collaborate with SBA IT architects, system owners, developers, and program teams to identify and incorporate security requirements into the design, development, procurement, and deployment of new and existing SBA systems and applications.
• Conduct security architecture reviews and technical assessments of proposed and existing SBA systems and solutions, identifying vulnerabilities, architectural weaknesses, security control gaps, and areas of non-compliance with federal security requirements, and documenting detailed findings and remediation recommendations.
• Support the development and maintenance of threat models for SBA systems and applications, applying industry-standard methodologies such as MITRE ATT&CK and STRIDE to systematically identify, assess, and prioritize security risks associated with SBA's technology landscape.
• Assist with the NIST Risk Management Framework (RMF) and Authorization to Operate (ATO) process, including contributing to the development and review of System Security Plans (SSPs), security control documentation, Plan of Action and Milestones (POA&Ms), and risk assessment artifacts in accordance with NIST guidelines and SBA's RMF procedures.
• Provide technical support and working-level guidance on Zero Trust Architecture (ZTA) principles and assist in the design, documentation, and implementation of Zero Trust frameworks, controls, and capabilities within SBA's enterprise environment in alignment with federal ZTA requirements and SBA's Zero Trust roadmap.
• Research and evaluate emerging cybersecurity technologies, tools, and solutions, preparing technical assessments and recommendations to support informed SBA security technology investment decisions and capability improvement initiatives.
• Support the development, review, and maintenance of cybersecurity policies, standards, guidelines, and procedures, ensuring alignment with NIST, FISMA, FedRAMP, and other applicable federal cybersecurity requirements and SBA-specific operational needs.
• Collaborate with SOC, incident response, vulnerability management, and privacy teams to ensure security architecture designs and recommendations support effective threat detection, incident response, vulnerability remediation, and privacy protection capabilities across SBA's enterprise.
• Develop and maintain accurate and comprehensive security architecture documentation, including security architecture diagrams, data flow diagrams, network topology diagrams, interface control documents, and technical design documents that reflect SBA's current and target security architecture states.
• Assist in the assessment and documentation of security…