Information Security Architect

Information Security Architect (EMS 2)

WaTech: Leading the way in technology!

Washington Technology Solutions (WaTech) is a national leader in adopting new, innovative technologies that transform the way Washingtonians receive state services. As the state’s central technology agency, WaTech is responsible for core IT services and guides the strategic direction of technology across multiple programs and domains.

About the opportunity:
This position is a part of the Security Engineering team in the Architecture and Innovation Division (AID). This position reports to the State Security Architecture Manager. 

As an Information Security Architect, you will architect and solve complex, high-risk enterprise security issues that could impact the state’s ability to provide mission-critical services to citizens and businesses and protect the data collected and maintained by the state. This position works to sustain public trust in these systems by assuring they are well architected and adequately secured, meeting or exceeding state and federal regulatory requirements.

Some of what to expect with this role:

• Architect, design, document, provide guidance and maintain the state’s enterprise security architecture including the infrastructure, integration and secure operation to support and enable the state’s mission-critical services. 
• Serve as a technical expert and resource in the statewide enterprise security infrastructure design process, applying the highest degree of technical expertise to resolve a wide range of difficult and complex security problems and implementation strategies. 
• Analyze requests and information from internal and external sources to identify, architect or recommend solutions.
• Develop information security solutions and strategies to meet and exceed short and long-term business goals and objectives, as well as other architectural requirements of WaTech and state agency systems. Proactively identify and address security gaps and deficiencies within the enterprise.
• Ensure compliance with the State Information Technology Security Policies and Standards industry best practices, laws and regulations, such as PCI, CJIS, SSA and IRS. 
• Analyze pre-production information, system designs, and documentation provided by agencies to identify deficiencies in the application of state information security policies, standards and industry best practices.
• Evaluate the security system posture against threats and vulnerabilities to determine the adequacy of the applicable security controls and ensure that they are implemented and operating effectively.
• Translate complex architecture and technical options from projects, consultations and design discussions, and reviews into business terms for agency and WaTech participants.
• Use industry best practices and tools to assess enterprise security risks and develop quantifiable measures for assessing and reporting to WaTech leadership.

Here’s what we’re looking for:

• Fifteen years of combined information technology experience working with multiple operating systems or information technology platforms, security, networking, development or other related technologies, which must include the following:
  • Six years of experience working with networking, security, system or cloud administration and integration in a large information technology environment.
  • Five years of information security experience in secure network or systems analysis, development, architecture, design or implementation.
  • Two years of experience supporting security and/or architecture standards and practices within a large organization.
  • Two years of experience leading complex information technology projects, including the application of project management principles.

* A bachelor’s or master’s degree in computer science, business administration, information security or related field may substitute for four or six years of experience, respectively.

• The ability to take action to learn and grow.
• The ability to take action to meet the needs of others

Preference may be granted to applicants with the following:

• Previous experience in enterprise architecture practices using one of the major EA frameworks, such as Zachman, TOGAF, or FEAF.
• Two years’ experience writing and implementing security policies and standards across large, diverse organizations.
• CISSP, CCSP, GISP, CEH or similar industry certifications.
• Experience with intrusion detection/intrusion prevention systems, defense and incident response.
• Extensive knowledge of security standards and regulations, such as ISO 27001/27002, COBIT, NIST 800-53, NIST CSF, ITIL, HIPAA, CJIS, etc.
• Demonstrated experience supporting systems security, system integration principles information security engineering and architectural principles and technologies.

Telework: This position is approved for telework. However, this position has an as needed onsite requirement to assist with customer consultations and participate in architecture workshops.

We value diversity and different perspectives:

WaTech is committed to providing equal access and opportunities to all qualified applicants and employees. We seek to attract and retain a diverse staff and welcome your experiences, perspectives and unique identity. We invite you to include your preferred name and pronouns in your material to ensure we address you correctly throughout the application process.

What WaTech offers:

As an employee of WaTech, you’ll have access to an outstanding employee benefits package that includes medical and dental plan options for you and your family, paid leave and holidays, retirement plan options and more. 

While WaTech is headquartered in Olympia, Washington, which is near some of the country’s most scenic national parks, we are able to offer many of our positions telework and flexible schedule options to help support a healthy work-life balance. 

To learn more about WaTech and what our employees enjoy about working here, please visit our website. 

Additional information about this role:

• This position requires a background check. Information from the background check will not necessarily preclude employment but will be considered in determining the applicant's suitability to perform in the position and is a continued condition of employment. 

How to apply:

Applications for this recruitment will be accepted electronically. Please select the large “apply” button at the top of this announcement. In addition to completing your online application, please also include the following attachments: 

• A current resume detailing your applicable experience, training and/or education. 
• A letter of interest highlighting how your experience aligns with the outlined job posting. 

Top candidates will be asked to provide a list of their professional references with contact information. 

Reminders: 

• A real person is reviewing your application material. It is in your best interest to complete the application in its entirety and review thoroughly before submitting. You will not be eligible to re-apply for this posting for 30 days.
• Applications with missing or incomplete fields, or supplemental question responses such as “see resume” may be considered incomplete and removed from consideration. 
• WaTech complies with the employment eligibility verification requirements of the federal Form I-9. The selected candidate must be able to provide proof of identity and eligibility to work in the United States. WaTech does not use the E-Verify system. We are not eligible to extend STEM Optional Practice Training (OPT) opportunities. For more information, please visit https://www.uscis.gov. 
• Applicants wishing to claim Veterans Preference should attach a copy of their DD-214 (Member 4 copy), NGB 22, or signed verification of service letter from the United States Department of Veterans Affairs to their application. (Please redact any personally identifiable data such as social security number and date of birth prior to submittal.)

By submitting your materials, you affirm that all information is true and correct. Any untruthful information is cause for removal from the applicant pool. If hired as a result of this recruitment, the discovery of incorrect or falsified information may lead to disciplinary action or dismissal.

Recruitment process:

The first round of application assessments will be conducted seven days after the initial job posting date. The hiring authority reserves the right to offer the position at any time after the initial seven-day job posting date. It is to the applicant's advantage to apply as early as possible. This recruitment may be used to fill multiple positions. 

The salary range reflected above reflects the full potential for this position. The base pay offered to the selected candidate will consider the candidate’s specific qualifying experience and internal equity of the existing team. 

Contact us: For inquiries about this position, please contact Rebekah Wilkes at (360) 407-8646 or email to recruitment@watech.wa.gov

If you’d like to request an accommodation for any part of the selection process, or to receive the application material in an alternate format, please contact Human Resources at (360) 407-8242 or Human.Resources@watech.wa.gov.Persons of disability or those who are deaf or hard of hearing can call the Washington Relay Service by dialing 7-1-1 or 1-800-833-6388. 

Salary : $115,008 - $147,216