Information Security Architect

State of Washington•Thurston County – Olympia, WA

16h•Hybrid

About The Position

This position is a part of the Security Engineering team in the Architecture and Innovation Division (AID). This position reports to the State Security Architecture Manager. As an Information Security Architect, you will architect and solve complex, high-risk enterprise security issues that could impact the state’s ability to provide mission-critical services to citizens and businesses and protect the data collected and maintained by the state. This position works to sustain public trust in these systems by assuring they are well architected and adequately secured, meeting or exceeding state and federal regulatory requirements.

Requirements

Fifteen years of combined information technology experience working with multiple operating systems or information technology platforms, security, networking, development or other related technologies
Six years of experience working with networking, security, system or cloud administration and integration in a large information technology environment.
Five years of information security experience in secure network or systems analysis, development, architecture, design or implementation.
Two years of experience supporting security and/or architecture standards and practices within a large organization.
Two years of experience leading complex information technology projects, including the application of project management principles.
A bachelor’s or master’s degree in computer science, business administration, information security or related field may substitute for four or six years of experience, respectively.
The ability to take action to learn and grow.
The ability to take action to meet the needs of others

Nice To Haves

Previous experience in enterprise architecture practices using one of the major EA frameworks, such as Zachman, TOGAF, or FEAF.
Two years’ experience writing and implementing security policies and standards across large, diverse organizations.
CISSP, CCSP, GISP, CEH or similar industry certifications.
Experience with intrusion detection/intrusion prevention systems, defense and incident response.
Extensive knowledge of security standards and regulations, such as ISO 27001/27002, COBIT, NIST 800-53, NIST CSF, ITIL, HIPAA, CJIS, etc.
Demonstrated experience supporting systems security, system integration principles information security engineering and architectural principles and technologies.

Responsibilities

Architect, design, document, provide guidance and maintain the state’s enterprise security architecture including the infrastructure, integration and secure operation to support and enable the state’s mission-critical services.
Serve as a technical expert and resource in the statewide enterprise security infrastructure design process, applying the highest degree of technical expertise to resolve a wide range of difficult and complex security problems and implementation strategies.
Analyze requests and information from internal and external sources to identify, architect or recommend solutions.
Develop information security solutions and strategies to meet and exceed short and long-term business goals and objectives, as well as other architectural requirements of WaTech and state agency systems.
Proactively identify and address security gaps and deficiencies within the enterprise.
Ensure compliance with the State Information Technology Security Policies and Standards industry best practices, laws and regulations, such as PCI, CJIS, SSA and IRS.
Analyze pre-production information, system designs, and documentation provided by agencies to identify deficiencies in the application of state information security policies, standards and industry best practices.
Evaluate the security system posture against threats and vulnerabilities to determine the adequacy of the applicable security controls and ensure that they are implemented and operating effectively.
Translate complex architecture and technical options from projects, consultations and design discussions, and reviews into business terms for agency and WaTech participants.
Use industry best practices and tools to assess enterprise security risks and develop quantifiable measures for assessing and reporting to WaTech leadership.