Job Details

Job Title: IT Security Architect 3

Location: Richmond, VA 23225 (Remote)

Duration: 12 months contract

Certifications: Does your candidate possess any of the (DESIRED) relevant certifications (e.g., CISSP, CISM, CCSP)? If so, please list them here and upload a copy of the certificate under the Reference Tab in Vector. If you indicate your candidate has one or more of these certifications, I will be looking for you to confirm by uploading a copy under the Reference tab in Vector! Otherwise, put N/A in the skills matrix.

Information Security Architect 3:

• On-Site Requirement: Monthly meetings and on-site as requested by the manager.
• Eligibility: Candidates must be able to be hired directly by the agency without sponsorship. U.S. Citizens or Green Card holders only.

Additional Notes:

• Role is 100% remote; however, selected candidates will be required to attend monthly meetings onsite in Richmond. Preference is for local Richmond candidates.
• This role has the potential to go permanent after 6 months. Candidates must be eligible to be considered by the agency and must not need sponsorship. U.S. Citizens or Green Card holders only (no EADs).
• Contractors will still be required to go through the VITA hiring process if interested in the FTE role. There is no guarantee of selection for the FTE role.

About the Role: We are seeking an experienced Information Security Architect to join our IT Security team. The ideal candidate will possess in-depth knowledge of creating governance documentation for Security Tools and Ser

Key Responsibilities:

• Identify and prioritize critical business functions in collaboration with organizational stakeholders.
• Perform security reviews, identify gaps in security architecture, and develop a security risk management plan.
• Evaluate security architectures and designs to determine the adequacy of security design and architecture proposed or provided in response to requirements documents.
• Determine the protection needs (i.e., security controls) for the information system(s) and network(s) and document appropriately.
• Communicate and collaborate with Information Security Engineers and System Administrators to collect environment variables and configurations.

Key Skills:

• Knowledge of the enterprise information technology (IT) architectural concepts and patterns (e.g., baseline, validated design, and target architectures).
• Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.
• Communicate and collaborate with Information Security Engineers and System Administrators to collect environment variables and configurations.
• Ability to map system configuration details to Security Policy Controls.
• Proven expertise in specific security technologies (e.g., SIEM, DLP, IAM, cloud security).

Experience & Requirements

Skill/Requirement

Level

Years

Experience in information security, with a focus on security technologies

Required

5

Excellent verbal and written communication skills; ability to convey complex security concepts in a clear and relatable manner

Required

3

Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes

Required

Ability to map system configuration details to Security Policy Controls

Required

Ability to work independently and as part of a team

Required

Proficient in documentation tools (e.g., Microsoft Word, Adobe Acrobat, Confluence)

Highly Desired

3

Excellent organizational skills and attention to detail

Highly Desired

3

Strong verbal and written communication skills

Highly Desired

3

Experience in project management and leading cross-functional initiatives

Highly Desired

Relevant certifications (e.g., CISSP, CISM, CCSP)

Highly Desired

3