Information Security Architect

Some of what to expect with this role:

• Architect, design, document, provide guidance and maintain the state’s enterprise security architecture including the infrastructure, integration and secure operation to support and enable the state’s mission-critical services.
• Serve as a technical expert and resource in the statewide enterprise security infrastructure design process, applying the highest degree of technical expertise to resolve a wide range of difficult and complex security problems and implementation strategies.
• Analyze requests and information from internal and external sources to identify, architect or recommend solutions.
• Develop information security solutions and strategies to meet and exceed short and long-term business goals and objectives, as well as other architectural requirements of WaTech and state agency systems. Proactively identify and address security gaps and deficiencies within the enterprise.
• Ensure compliance with the State Information Technology Security Policies and Standards industry best practices, laws and regulations, such as PCI, CJIS, SSA and IRS.
• Analyze pre-production information, system designs, and documentation provided by agencies to identify deficiencies in the application of state information security policies, standards and industry best practices.
• Evaluate the security system posture against threats and vulnerabilities to determine the adequacy of the applicable security controls and ensure that they are implemented and operating effectively.
• Translate complex architecture and technical options from projects, consultations and design discussions, and reviews into business terms for agency and WaTech participants.
• Use industry best practices and tools to assess enterprise security risks and develop quantifiable measures for assessing and reporting to WaTech leadership., Telework: This position is approved for telework. However, this position has an as needed onsite requirement to assist with customer consultations and participate in architecture workshops., * Applications with missing or incomplete fields, or supplemental question responses such as “see resume” may be considered incomplete and removed from consideration.
• WaTech complies with the employment eligibility verification requirements of the federal Form I-9. The selected candidate must be able to provide proof of identity and eligibility to work in the United States. WaTech does not use the E-Verify system. We are not eligible to extend STEM Optional Practice Training (OPT) opportunities. For more information, please visit https://www.uscis.gov.
• Applicants wishing to claim Veterans Preference should attach a copy of their DD-214 (Member 4 copy), NGB 22, or signed verification of service letter from the United States Department of Veterans Affairs to their application. (Please redact any personally identifiable data such as social security number and date of birth prior to submittal.)

By submitting your materials, you affirm that all information is true and correct. Any untruthful information is cause for removal from the applicant pool. If hired as a result of this recruitment, the discovery of incorrect or falsified information may lead to disciplinary action or dismissal.

Here’s what we’re looking for:

• Fifteen years of combined information technology experience working with multiple operating systems or information technology platforms, security, networking, development or other related technologies, which must include the following:
• Six years of experience working with networking, security, system or cloud administration and integration in a large information technology environment.
• Five years of information security experience in secure network or systems analysis, development, architecture, design or implementation.
• Two years of experience supporting security and/or architecture standards and practices within a large organization.

• Two years of experience leading complex information technology projects, including the application of project management principles.

• A bachelor’s or master’s degree in computer science, business administration, information security or related field may substitute for four or six years of experience, respectively.

• The ability to take action to learn and grow.
• The ability to take action to meet the needs of others, * Previous experience in enterprise architecture practices using one of the major EA frameworks, such as Zachman, TOGAF, or FEAF.
• Two years’ experience writing and implementing security policies and standards across large, diverse organizations.
• CISSP, CCSP, GISP, CEH or similar industry certifications.
• Experience with intrusion detection/intrusion prevention systems, defense and incident response.
• Extensive knowledge of security standards and regulations, such as ISO 27001/27002, COBIT, NIST 800-53, NIST CSF, ITIL, HIPAA, CJIS, etc.
• Demonstrated experience supporting systems security, system integration principles information security engineering and architectural principles and technologies.

Pulled from the full job description

• Health insurance
• Retirement plan
• Dental insurance
• Paid holidays
• Flexible schedule, As an employee of WaTech, you’ll have access to an outstanding employee benefits package that includes medical and dental plan options for you and your family, paid leave and holidays, retirement plan options and more.

While WaTech is headquartered in Olympia, Washington, which is near some of the country’s most scenic national parks, we are able to offer many of our positions telework and flexible schedule options to help support a healthy work-life balance.

To learn more about WaTech and what our employees enjoy about working here, please visit our website.

WaTech: Leading the way in technology!

Washington Technology Solutions (WaTech) is a national leader in adopting new, innovative technologies that transform the way Washingtonians receive state services. As the state’s central technology agency, WaTech is responsible for core IT services and guides the strategic direction of technology across multiple programs and domains.

About the opportunity: This position is a part of the Security Engineering team in the Architecture and Innovation Division (AID). This position reports to the State Security Architecture Manager.