LOCATION: National Capital Region - Washington, DC or Northern Virginia
EXPERIENCE LEVEL: Intermediate
CLEARANCE: TOP SECRET/SCI
WORK ROLE DESCRIPTION:
Develops and maintains business, systems, and information processes to support enterprise mission needs; develops information technology (IT) rules and requirements that describe baseline and target architectures.
TASKS:
- Define appropriate levels of system availability based on critical system functions and ensure that system requirements identify appropriate disaster recovery and continuity of operations requirements to include any appropriate fail-over/alternate site requirements, backup requirements, and material supportability requirements for system recover/restoration.
- Employ secure configuration management processes.
- Ensure that acquired or developed system(s) and architecture(s) are consistent with organization's cybersecurity architecture guidelines.
- Identify and prioritize critical business functions in collaboration with organizational stakeholders.
- Provide advice on project costs, design concepts, or design changes.
- Provide input to the Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials).
- Analyze candidate architectures, allocate security services, and select security mechanisms.
- Develop a system security context, a preliminary system security Concept of Operations (CONOPS), and define baseline system security requirements in accordance with applicable cybersecurity requirements.
- Evaluate security architectures and designs to determine the adequacy of security design and architecture proposed or provided in response to requirements contained in acquisition documents.
- Write detailed functional specifications that document the architecture development process.
- Analyze user needs and requirements to plan architecture.
- Capture and integrate essential system capabilities or business functions required for partial or full system restoration after a catastrophic failure event.
- Develop enterprise architecture or system components required to meet user needs.
- Document and update as necessary all definition and architecture activities.
- Integrate results regarding the identification of gaps in security architecture.
- Plan implementation strategy to ensure that enterprise components can be integrated and aligned.
- Translate proposed capabilities into technical requirements.
- Document how the implementation of a new system or new interface between systems impacts the current and target environment including but not limited to security posture.
- Integrate key management functions as related to cyberspace.
ABILITIES:
- Skill in applying and incorporating information technologies into proposed solutions.
- Skill in designing the integration of hardware and software solutions.
- Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.
- Skill in design modeling and building use cases (e.g., unified modeling language).
- Skill in writing code in a currently supported programming language (e.g., Java, C++).
- Skill in the use of design methods.
- Skill to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
- Skill to identify cybersecurity and privacy issues that stem from connections with internal and external customers and partner organizations.
EDUCATION:
Bachelor degree or higher from an accredited college or university
Prefer an accredited Computer Science, Cyber Security, Information Technology, Software Engineering, Information Systems, or Computer Engineering degree; or a degree in a Mathematics or Engineering field.
CERTIFICATION(S):
IAT, IAM, or IASAE Level 3