Security Architect
ECS Corporate Services

ECS is seeking an Security Architect to work in our Washington, DC office.

The ECS Team provides guidance to the Supply Chain Risk Management Unit (SCRMU) for identifying, assessing, selecting, and implementing risk management processes; as well as providing mitigating controls for information and communication technology (ICT) procurement and acquisition throughout the FBI.

• Leads and assists in the delivery of cyber security and IT security engineering projects
• Creates security architecture standards for adoption of new technology
• Identifies, quantifies, and recommends actionable, traceable, and exploitable mitigations for security risks as they relate to enterprise projects
• Produces proactive management reporting, including appropriate metrics that inform senior leadership as to the state of information risk and exposure based upon FBI controlled or requested ICT assets
• Produces assessment workflow metrics that provide unit and senior management with insight into backlogs, prioritization changes, and process improvement to expedite responsiveness to mission customers
• General understanding of Office products such as Word, Excel, and SharePoint for creating and managing asset lists, project requirements, and other deliverables
• Applied understanding of product quality control, auditing, continuous monitoring, and generating standards that normalize assessment products for process improvement and data exploitation
• Understands security product / service cost drivers and industry and business trends impacting the Federal government with specific focus on the FBI and IC agencies
• Recognizes and proactively identifies potential areas where existing security policies and procedures require change, or where new ones need to be developed, especially regarding future business expansion
• Serves as information security subject matter experts for the Federal government's assessment of ICT product proposed for purchase or renewal
• Collaborates with FBI enterprise IT management personnel to ensure integration of SCRM efforts with larger enterprise security and operational goals
• Evaluates and recommends security software/hardware and its integration into existing architecture
• Researches and benchmarks security infrastructure technologies as it relates to the organization

Salary Range: $140,000 - $150,000

General Description of Benefits

• Must have a current Top-Secret Clearance with the capability of obtaining SCI / CI-Poly if needed to meet contract requirements.
• Bachelor's degree in technical discipline preferred
• Minimum 7+ years of progressive experience in technical roles in cyber security
• Experience with Supply Chain Risk Management (SCRM) guidance including NIST 800-161, 800-137, and 800-53 - I added this
• Experience leading security design and architecture reviews of large applications, systems, and networks
• Conduct risk assessments for new and existing systems
• Provide technical guidance on security best practices
• Experience with the capabilities and architectural roles of key Information and Communication Technologies such as Firewalls, IDS/IPS, SIEM, EDR, Switches, Routers, etc. to guide decisions
• Comfortable communicating with engineers, creative teams, and executives to translate security needs into actionable plans
• Experience in leading security reviews of software to include open source, proprietary, and data services
• Experience in technical customer support to include monitoring incident resolution preferred
• Some familiarity or experience with Cloud technology or AI preferred
• A track record of success in securing large and complex environments, such as data centers or other industrial space

---