> Markdown version of [/jobs/ext/2246186-information-technology-enterprise-expert-information-security-architect](https://www.wearedevelopers.com/jobs/ext/2246186-information-technology-enterprise-expert-information-security-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Technology Enterprise Expert - Information Security Architect - **Company:** State of Iowa - **Location:** Polk County, IA, United States (Remote available) - **Experience:** Expert - **Salary:** $85,176.0 - $197,704.0 - **Contract:** Permanent contract - **Skills:** Cyber Security, Databases, Mainframes, Software Engineering, System Programming, Mitre Att&ck, Information Technology - **Published:** August 26, 2026 - **Apply:** https://www.careerjet.com/job/us68b87c39a7b2c99dd1e4c18cc108597f/eaa ## About the Role * Proven expertise in security architecture and enterprise-level design. * Experience with NIST and RMF frameworks for secure system implementation. * Knowledge of threat modeling using MITRE ATT&CK and cyber kill chain methodologies. * Strong collaboration skills to work across agencies and technical teams. * Ability to translate policy into actionable controls for compliance and audit readiness. * Forward-thinking approach to address emerging threats and technologies. * Preferred certifications: CISSP, CISA, GSEC, or equivalent., 6 months' experience, 12 semester hours, or a combination of both in analyzing and identifying risks and the corresponding potential impact to information and information technology systems. AND 728 Physical Security: 6 months' experience, 12 semester hours, or a combination of both in the physical aspects of securing information technology systems. AND 990 Cyber Security Planning: A minimum of 18 months of full-time work experience in cyber security planning at a professional level that included the following major functions: participating in and leading a company-/agency-wide cyber security planning program including the identification of cyber security risks, development of prevention and response plans to minimize cyber-attack damages including mass care and consequences management, and the development of continuation of business operation plans; participating in national cyber security planning initiatives and exercises; responding to and participating in the recovery work from cyber security incidents; and working across governments, private sectors, and non-profit organizations collaboratively on cyber security planning activities and plans for response. Minimum Qualification Requirements Applicants must meet at least one of the following minimum requirements to qualify for positions in this job classification: 1) Graduation from an accredited four-year college or university with a degree in any field, and experience equal to five years of full-time work in one or more of the following areas: mainframe computing systems programming; computer-based networking (LAN, WAN); database management systems; applications development, maintenance, and testing; server and workstation operating systems; telecommunications carrier operations; and/or Internet/Intranet development and deployment. 2) All of the following (a and b): a. Five years of full-time work experience in one or more of the following areas: mainframe computing systems programming; computer-based networking (LAN, WAN); database management systems; applications development, maintenance, and testing; server and workstation operating systems; telecommunications carrier operations; and/or Internet/Intranet development and deployment; and b. One of the following (i or ii): i. Twenty-four semester hours of accredited post-high-school course work in one of the specialty areas listed in part a; or ii. Certification from an authorized educational institution or a major computer/software producer in an area directly related to one of the specialty areas listed in part a. 3) A total of nine years of education and/or full-time experience in one or more of the following areas: mainframe computing systems programming; computer-based networking (LAN, WAN); database management systems; applications development, maintenance, and testing; server and workstation operating systems; telecommunications carrier operations; and/or Internet/Intranet development and deployment, where thirty semester hours of accredited college or university coursework in any field equals one year of full-time experience. 4) Current, continuous experience in the state executive branch that includes two years of full-time work as an Information Technology Specialist 5. ## Description Only applicants who meet the Minimum Qualification Requirements and meet all selective requirements (listed below) will be placed on the eligible list. The Department of Management (DOM), Division of Information Technology (DoIT), is seeking an Information Security Architect to design, implement, and govern the State of Iowa's enterprise security architecture. This position is critical to safeguarding state systems and data by embedding security into technology solutions, aligning with national standards, and advancing the Iowa Cyber Strategy and CyberGUARD framework., * Develop, implement, and continuously improve the State's enterprise security architecture framework. * Define and enforce standards that integrate security controls across systems, platforms, and services. * Establish scalable technical, administrative, and physical controls to maintain a consistent security posture statewide. * Serve as the authority for identifying and documenting compensating controls when baseline measures are not feasible. * Ensure alignment with NIST SP 800-53, Risk Management Framework (RMF), and the Iowa Cyber Strategy. * Translate compliance and policy requirements into measurable, enforceable security controls. * Conduct threat modeling using frameworks such as MITRE ATT&CK and the cyber kill chain to inform architecture decisions. * Enhance visibility and reporting of controls to support audits, assessments, and incident response. * Collaborate with leadership, agency partners, and technical teams to embed secure design principles. * Lead enterprise-wide initiatives, including project charters, cost-benefit analyses, and vendor oversight. * Analyze statewide security trends and report on performance, risk posture, and architecture effectiveness. * Represent the Chief Information Security Officer (CISO) in interagency committees and strategic planning efforts. * Promote adoption of CyberGUARD standards and secure architecture practices across agencies. * Evaluate emerging technologies and evolving threats to strengthen enterprise security architecture. ## Related Videos - [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases) - [Cloud as the new mainframe: why the cloud hype does not reflect the dev reality](https://www.wearedevelopers.com/videos/797-cloud-as-the-new-mainframe-why-the-cloud-hype-does-not-reflect-the-dev-reality) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1146-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [".Net is too slow" was not an option](https://www.wearedevelopers.com/videos/100176-net-is-too-slow-was-not-an-option) ## Related Articles - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [How should you format your IT resume?](https://www.wearedevelopers.com/magazine/68-how-should-you-format-your-it-resume) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [System change: restart as developer?](https://www.wearedevelopers.com/magazine/39-system-change-restart-as-developer) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)