Enterprise Security Architect at 9th Way Insignia in Dallas, TX

Company Introduction
9th Way Insignia is a service-disabled, veteran-owned small business bringing transformative technology to our government customers so they can achieve their missions. Our specialties include cybersecurity, cloud modernization, software development, data analytics, enterprise architecture, enterprise IT, and artificial intelligence. Learn more about 9th Way Insignia at https://9thwayinsignia.com.

Team (Project) Introduction

The Enterprise Security Architecture (ESA) project is a comprehensive initiative by the Department of Veterans Affairs (VA) to enhance and secure its IT infrastructure. The project focuses on developing a unified security architecture that integrates new and emerging technologies, such as cloud computing, IoT, and AI, while ensuring compliance with federal cybersecurity standards. The goal of the ESA project is to protect the VA's information systems and data, ensuring the confidentiality, integrity, and availability of critical information while supporting the VA's mission to provide secure, reliable services to Veterans.

9th Way Insignia is seeking a highly skilled Enterprise Security Architect, Intermediate to contribute to the development and implementation of a cohesive Enterprise Security Architecture (ESA) that ensures the confidentiality, integrity, and availability of Veteran and VA information. You will work collaboratively with senior architects and various stakeholders to design, document, and deploy secure technologies across the VA enterprise. This position is crucial in our efforts to modernize VA’s cybersecurity infrastructure, address emerging threats, and align with federal cybersecurity strategies.

Professional Level

The Enterprise Security Architect, Intermediate position aligns as an E3, Engineer.

Functional Job (LCAT) Information:

Enterprise Architect

Responsibilities

IT Architecture Design and Security Solutions: Contribute to the design and development of secure IT architectures for both cloud and on-premise systems within the ESA project, ensuring alignment with the VA’s security and operational requirements.

Documentation and Framework Development: Create detailed architecture diagrams, white papers, frameworks, and documentation that cover all components of the ESA project, including network topology and security infrastructure.

Security Policy and Threat Mitigation: Apply your proficiency in cybersecurity policy and threat mitigation to design and implement robust security solutions within the ESA project, utilizing tools like intrusion detection systems and Public Key Infrastructure (PKI).

Cloud and On-Premise Security Architecture: Develop IT architectures with a focus on security and risk management across both cloud and on-premise systems, ensuring the integration of best practices and the latest technologies.

Enterprise Architecture Tools Utilization: Use Enterprise Architecture tools such as Sparx EA and ArchiMate to support architectural decisions, analyses, and the overall design process within the ESA project.

Trade-Off Analysis: Perform trade-off analyses to balance scope, schedule, and performance considerations within the ESA project, ensuring that security solutions meet both technical requirements and project constraints.

Containerization and Serverless Security: Implement secure containerization strategies using tools like Docker Security or Kubernetes, and apply serverless security frameworks to ensure secure function-as-a-service (FaaS) deployments in cloud-native applications.

Identity and Access Management (IAM): Utilize identity governance tools such as SailPoint or ForgeRock to enhance identity and access management (IAM) practices within the ESA project, ensuring secure and compliant access controls.

Network Security Design: Apply knowledge of Software Defined Networking (SDN) and Network Function Virtualization (NFV) to secure dynamic, programmable networks within the ESA project, enhancing the overall security posture.

Collaboration and Communication: Work closely with senior architects, cybersecurity analysts, and other stakeholders to ensure that the ESA project’s architecture is robust, secure, and aligned with the VA’s strategic objectives.

Security Certification and Compliance: Maintain relevant certifications such as Certified Information Security Manager (CISM) or AWS Certified Security – Specialty, ensuring that your knowledge and practices are up to date with industry standards.

Security Clearance and Compliance: Ensure the ESA project adheres to all relevant security regulations and support the process of obtaining and maintaining a Tier 4 / High Risk Public Trust background investigation for project personnel.

Requirements

5+ years of experience in IT architecture design and security solutions for both cloud and on-premise systems.

Bachelor's degree in engineering, math, cybersecurity, or a relevant field (or 5 years of additional relevant experience in IT architecture may be substituted for education).

Proficiency in IT architecture design, including the creation of diagrams, white papers, frameworks, and documentation covering all system components, such as network topology and security infrastructure.

Proficiency in cybersecurity policy, threat mitigation, and the use of cybersecurity tools, such as intrusion detection systems and Public Key Infrastructure.

Experience with the design and development of IT architectures, focusing on security and risk management across cloud and on-premise systems.

Demonstrated use of Enterprise Architecture tools, such as Sparx EA and ArchiMate, to support architectural decisions and analyses.

Proven ability to perform trade-off analyses between scope, schedule, and performance within IT and security projects.

Ability to obtaining a Tier 4 / High Risk Public Trust background investigation

Experience with containerization security, focusing on tools like Docker Security or Kubernetes for secure microservice architectures.

Familiarity with serverless security frameworks for cloud-native applications to ensure secure function-as-a-service (FaaS) deployments.

Skills in identity governance tools such as SailPoint or ForgeRock for advanced identity and access management (IAM) practices.

Knowledge of Software Defined Networking (SDN) and Network Function Virtualization (NFV) for securing dynamic, programmable networks.

Certifications such as Certified Information Security Manager (CISM) or AWS Certified Security – Specialty.

Salary Range

The salary range for this position is $96,370.33 - $152,655.36

9th Way Insignia’s range for this job level is a general guideline only and not a guarantee of compensation or salary.

Clearance, background investigation

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.

Tier 4 / High Risk Public Trust

Location
This position is remote.

9th Way Insignia reserves the right to adjust work location based upon mission requirements.

Benefits

Benefits eligible employees will have access to our comprehensive benefits package which includes Medical, Dental, Vision, Voluntary Life Insurance, 401(k), Basic Life A&D, STD, LTD, PTO, Telehealth, paid holidays, FSA, HSA. Employee resources such as an Employee Assistance Program (EAP) and Traveling Assistance.

Legal
We’re an equal employment opportunity/affirmative action employer that empowers our people to fearlessly drive change – no matter their race, color, ethnicity, religion, sex (including pregnancy, childbirth, lactation, or related medical conditions), national origin, ancestry, age, marital status, sexual orientation, gender identity and expression, disability, veteran status, military or uniformed service member status, genetic information, or any other status protected by applicable federal, state, local, or international law. hr@9th-way.com