enterprise security architect

Tata Consultancy Services (TCS)

<div></div><div><div><div><div><div>Enterprise Architect &ndash; IAM
</div><ul><li>Enterprise security architecture;
</li></ul><ul><li>AI for security and Security for AI
</li></ul><ul><li>IAM &amp; access frameworks;
</li></ul><ul><li>Cloud &amp; application security;
</li></ul><ul><li>Risk &amp; compliance alignment;
</li></ul><ul><li>Zero-trust principles;
</li></ul><ul><li>Security stakeholder collaboration</li></ul><br>
<div><br>
</div><div>Salary Range- $120,000-$150,000 a year
</div><div>#LI-SP3
</div><div>#LI-VX1
</div></div></div></div><div><div><div><b>Location</b></div>
<div>Irvine, CA</div>
</div><div><div><b>Job Function</b></div>
<div>TECHNOLOGY</div>
</div><div><div><b>Role</b></div>
<div>Enterprise Architect</div>
</div><div><div><b>Job Id</b></div>
<div>402494</div>
</div><div><div><b>Desired Skills</b></div>
<div>IAM</div>
</div><div><div><b>Salary Range</b></div>
<div>$120,000-$150,000 a year</div>
</div></div><p>Desired Candidate Profile
</p><div><div><b>Qualifications</b> : BACHELOR OF COMPUTER SCIENCE</div></div></div><div></div>

Enterprise Architect IAM

UnitedHealth Group

<div><p>Optum Tech is a global leader in health care innovation. Our teams develop cutting-edge solutions that help people live healthier lives and help make the health system work better for everyone. From advanced data analytics and AI to cybersecurity, we use innovative approaches to solve some of health care's most complex challenges. Your contributions here have the potential to change lives. Ready to build the next breakthrough? Join us to start <b>Caring. Connecting. Growing together.</b></p><p><br>
The Security Architect serves as a technical security authority supporting mergers and acquisitions (M&amp;A) security implementation programs. This role is responsible for defining, influencing, and implementing security architectures and controls that are being developed to be included within Optum's current security portfolio, while ensuring integrations are executed securely, efficiently, and in alignment with enterprise risk tolerance.</p><p><br>
This role operates at the intersection of integration delivery, security architecture, and product/platform evolution. The Principal Security Architect partners closely with M&amp;A targets, Enterprise Security, Infrastructure, Cloud, Application, and Product teams to translate integration-driven security needs into actionable architectures, capability gaps, roadmap recommendations, and ready to implement accordingly both individually and by others within the organization.</p><p><br>
Success in this role requires the ability to lead through influence without authority, operate effectively amid ambiguity, and balance identified risks with long-term platform and product strategy.</p><p><br>
You'll enjoy the flexibility to work remotely * from anywhere within the U.S. as you take on some tough challenges. For all hires in the Minneapolis or Washington, D.C. area, you will be required to work in the office a minimum of four days per week.</p><p><b><br>
Key Accountabilities:</b></p><ul><li>
Serve as an architect for M&amp;A integration initiatives, accountable for the overall security architecture, risk posture, and strategic alignment of acquired entities</li><li>
Lead security discovery and architecture assessments of acquisition targets to identify gaps between current UHG capabilities and required future-state security outcomes</li><li>
Define and recommend security solutions and architectural patterns where capabilities do not yet exist, including interim, compensating, and long-term solutions</li><li>
Partner with downstream internal teams (Enterprise Security, Infrastructure, Cloud, IAM, Application Security, Product, and Engineering) to:</li><li>
Understand existing technical offerings and constraints</li><li>
Translate integration-driven security requirements into capability enhancements or net-new solutions</li><li>
Influence and shape security product and platform roadmaps to close identified gaps</li><li>
Act as a trusted advisor to business and technology leaders, clearly articulating security risk, trade-offs, and architectural options</li><li>
Lead the development of future-state security architectures, reference designs, and integration patterns applicable across multiple acquisitions</li><li>
Provide architectural oversight through early implementation phases to ensure security intent is preserved and delivered</li><li>
Drive alignment across multiple stakeholders with competing priorities, using influence rather than authority</li><li>
Mentor and provide architectural guidance to other security and integration architects across the organization</li><li>
Represent security architecture in executive-level discussions related to M&amp;A strategy, integration planning, and risk decisions</li></ul><p><br>
<br>
<b>Primary Responsibilities:</b></p><ul><li>
Own and evolve security architecture standards and patterns for M&amp;A, including:</li><li>
Identity and Access Management (IAM)</li><li>
Network and perimeter security</li><li>
Cloud and hybrid security</li><li>
Data protection and privacy controls</li><li>
Evaluate and document security risks, assumptions, dependencies, and constraints associated with protecting acquired environments</li><li>
Produce high-quality internal artifacts including:</li><li>
Security architecture diagrams and reference architectures</li><li>
Gap analyses and capability assessments</li><li>
Roadmap input and security design recommendations</li><li>
Provide guidance on secure adoption of Optum platforms while recognizing when non-standard or emerging solutions are required</li><li>
Develop automation where applicable that enables security deployments to be faster, more programmatic, and reduce human intervention</li></ul><p></p><p><br>
You'll be rewarded and recognized for your performance in an environment that will challenge you and give you clear direction on what it takes to succeed in your role as well as provide development for other roles you may be interested in.</p><p><b><br>
Required Qualifications:</b></p><ul><li>
Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent experience</li><li>
8+ years of experience in security architecture, enterprise security, or platform security roles, with demonstrated impact at an enterprise level</li><li>
Proven experience supporting M&amp;A integrations, complex enterprise transformations, or large-scale platform initiatives</li><li>
Solid breadth across IT and security domains, including:<ul><li>
Cloud (public, private, hybrid) security architectures</li><li>
IAM, zero trust, and secure access models</li><li>
Network, endpoint, and infrastructure security</li><li>
Security orchestration &amp; automated response</li></ul></li><li>
Demonstrated ability to operate in high ambiguity environments where requirements, solutions, or products are not yet fully defined</li><li>
Experience influencing product, platform, or service roadmaps based on architectural and security needs</li><li>
Exceptional ability to communicate complex security concepts to technical and non-technical audiences</li><li>
Proven track record of leading through influence across organizational boundaries</li></ul><p><b><br>
Preferred Qualifications:</b></p><ul><li>
Healthcare or other highly regulated industry experience</li><li>
Expert level experience with the following tools:<ul><li>
Zscaler</li><li>
Palo Alto</li><li>
Microsoft Entra</li><li>
Splunk</li><li>
Tanium</li></ul></li><li>
Experience designing or influencing enterprise security platforms or shared services</li><li>
Familiarity with regulatory and compliance frameworks (e.g., HIPAA, NIST, ISO, SOC)</li><li>
Experience working with executive stakeholders during acquisition due diligence and integration planning</li><li><p>
Mentorship or thought leadership experience within architecture or security communities that can effectively span down towards younger engineers</p></li><p></p><li><br>
All employees working remotely will be required to adhere to UnitedHealth Group's Telecommuter Policy.</li></ul><p><br>
Pay is based on several factors including but not limited to local labor markets, education, work experience, certifications, etc. In addition to your salary, we offer benefits such as, a comprehensive benefits package, incentive and recognition programs, equity stock purchase and 401k contribution (all benefits are subject to eligibility requirements). No matter where or when you begin a career with us, you'll find a far-reaching choice of benefits and incentives. The salary for this role will range from $112,700 to $193,200 annually based on full-time employment. We comply with all minimum wage laws as applicable.</p><p>
Application Deadline: This will be posted for a minimum of 2 business days or until a sufficient candidate pool has been collected. Job posting may come down early due to volume of applicants.</p><p></p><p><i><br>
At UnitedHealth Group, our mission is to help people live healthier lives and make the health system work better for everyone. We believe everyone-of every race, gender, sexuality, age, location and income-deserves the opportunity to live their healthiest life. Today, however, there are still far too many barriers to good health which are disproportionately experienced by people of color, historically marginalized groups and those with lower incomes. We are committed to mitigating our impact on the environment and enabling and delivering equitable care that addresses health disparities and improves health outcomes - an enterprise priority reflected in our mission.</i></p><p></p><p><i><br>
UnitedHealth Group is an Equal Employment Opportunity employer under applicable law and qualified applicants will receive consideration for employment without regard to race, national origin, religion, age, color, sex, sexual orientation, gender identity, disability, or protected veteran status, or any other characteristic protected by local, state, or federal laws, rules, or regulations.</i></p><p><i><br>
UnitedHealth Group is a drug - free workplace. Candidates are required to pass a drug test before beginning employment.</i></p></div>

Security Architect- Remote or Hybrid in MN or DC

The Jackson Laboratory

<div><h2 class="jobSectionHeader"><b>Principal Security &amp; Network Architect</b></h2><p></p><p>
The Principal Security &amp; Network Architect is the organization&rsquo;s senior-most technical authority for enterprise security and network architecture. This role leads the development of long-term architectural vision, establishes enterprise-wide standards and guides modernization initiatives across data center, cloud, campus and hybrid environments.</p><p>
Operating at a strategic global perspective, the Principal Architect partners with executive leadership to reduce system risk, enable innovation, and ensure secure, scalable, and resilient infrastructure. This role has no direct reports, but provides enterprise-wide technical leadership through influence, governance, and architectural oversight.</p><p></p><p><b>
Key Responsibilities</b></p><ul><li>
Define and own the technical aspects of enterprise security and network architecture strategy.</li><li>
Lead the development of technical control baselines and benchmarks for Global Operations in US, Asia, and EU around data security and patient data.</li><li>
Serves as Co-Chair of JAX IT Architecture Review Board.</li><li>
Lead the design, development and deployment of Enterprise level security and networking platforms.</li><li>
Conduct research and develop, document, and communicate plans for investing in systems architecture, including analysis of cost reduction opportunities.</li><li>
Documents relevant architecture design and analysis work. Advocates for the architecture process, its outcomes and ongoing results. Identifies the organizational impact on skills, process, structures, and culture as well as the financial impact of design decisions and implementations.</li><li>
Identify required architecture components and/or frameworks. Prioritize architecture deliverables, and establish short-term, mid-term and long range architecture plans. Bridge between tactical implementations and strategic architectural designs. Ensure security requirements are met for the development and deployment of both on premise and cloud infrastructure and services.</li><li>
Establish architectural principles, standards, and reference patterns across infrastructure, cloud and connectivity domains.</li><li>
Lead architecture for segmentation, Zero Trust, SD-WAN, cloud networking, identity integration, and resilient network design.</li><li>
Provide advisory guidance on technology risk, modernization priorities, and infrastructure investment decisions.</li><li>
Drive reduction of technical debt and legacy risk exposure</li><li>
Lead enterprise threat modeling and architectural risk analysis for critical systems.</li><li>
Evaluate emerging technologies and guide strategic adoption</li><li>
Mentor senior engineer and architects; elevate overall architectural maturity across teams.</li><li>
Participate in Disaster Recovery, Business Continuity Planning and incident response activities as a Subject Matter Expert.</li><li>
Participate in after-hours support for incidents and ensure continuity of operations.</li></ul><p></p><p><b>
Qualifications</b></p><ul><li>
15-20+ years of experience in enterprise security and network architecture with 10 years in a leadership role either directly or in a matrixed organization.</li><li>
Expert level understanding of infrastructure and application security, Zero Trust principles, and modern cloud architectures.</li><li>
Proven ability to weigh business needs against security concerns and articulate issues to management.</li><li>
Deep expertise in enterprise networking (LAN/WAN, cloud networking, segmentation, SD-WAN) and modern security architecture (Zero-trust, identity-centric model, cloud security).</li><li>
Experience advising leadership on technology risk and infrastructure strategy</li><li>
Strong understanding of regulatory and compliance considerations.</li><li>
Strong analytical and communication skills, with the ability to present complex topics to technical and executive audiences.</li><li>
Familiarity with frameworks such as SABSA, TOGAF, or Zachmann is a plus.</li></ul><p></p><p>
Pay Range: $136,461 - $228,467</p><p></p><p>
#CA-EH8</p><p></p><p><b>
About JAX:</b></p><p>
The Jackson Laboratory is an independent, nonprofit biomedical research institution with a National Cancer Institute-designated Cancer Center and nearly 3,000 employees in locations across the United States (Maine, Connecticut, California), Japan and China. Its mission is to discover precise genomic solutions for disease and empower the global biomedical community in the shared quest to improve human health.</p><p></p><p>
Founded in 1929, JAX applies over nine decades of expertise in genetics to increase understanding of human disease, advancing treatments and cures for cancer, neurological and immune disorders, diabetes, aging and heart disease. It models and interprets genomic complexity, integrates basic research with clinical application, educates current and future scientists, and provides critical data, tools and services to the global biomedical community. For more information, please visit www.jax.org.</p><p></p><p><b>
EEO Statement:</b></p><p><i>
The Jackson Laboratory provides equal employment opportunities to all employees and applicants for employment in all job classifications without regard to race, color, religion, age, mental disability, physical disability, medical condition, gender, sexual orientation, genetic information, ancestry, marital status, national origin, veteran status, and other classifications protected by applicable state and local non-discrimination laws.</i></p></div>

Principal Security & Network Architect - Remote/Hybrid

Broadway Ventures

<p><b>IRS Cybersecurity Enterprise Architect SME</b> Key Personnel | Full-Time | Hybrid/Onsite &ndash; New Carrollton, MD | Public Trust MBI Required</p><p><b>Overview</b></p><p>Broadway Ventures is pursuing a federal cybersecurity contract with the Internal Revenue Service and is seeking a senior Cybersecurity Enterprise Architect to serve as a Key Personnel designee. This individual will be embedded directly within the IRS IT Cybersecurity Engineering &amp; Architecture Branch, serving as a chief technical adviser to senior IRS leadership and driving enterprise-wide cybersecurity modernization initiatives. This is a high-visibility role with direct impact on one of the largest and most complex federal IT environments in the government.</p><p><b>Responsibilities</b></p><ul><li>Design, develop, and maintain the IRS enterprise cybersecurity reference architecture aligned with Zero Trust Architecture (ZTA) principles and DHS Continuous Diagnostics and Mitigation (CDM) program requirements</li><li>Serve as the primary architecture adviser to IRS CTO and CIO-level leadership on cybersecurity strategy, technology investment, and modernization roadmap</li><li>Lead planning and design efforts for CDM capability implementation across asset management, identity credentialing, network security, and data protection domains</li><li>Provide technical leadership across all five ZTA pillars: identity, device, network, application, and data</li><li>Evaluate and recommend emerging cybersecurity technologies for adoption and integration into the IRS hybrid cloud/on-premises environment</li><li>Identify and drive tool consolidation efforts to reduce redundancy and technical debt across the security tool stack</li><li>Participate in architecture review boards, technical working groups, and governance bodies</li><li>Develop and maintain architecture documentation, design artifacts, and technical standards</li><li>Ensure security-by-design is embedded across all IRS systems, applications, and cloud migrations</li><li>Support evaluation of Palo Alto product integrations (Prisma, XSIAM) and Microsoft O365 G5 security suite enhancements including DLP and MCAS</li></ul><p><b>Required Qualifications</b></p><ul><li>15&ndash;20 years of hands-on experience in cybersecurity architecture within large-scale enterprise environments</li><li>Bachelor's degree in Information Technology, Cybersecurity, Computer Science, or related field (equivalent experience considered)</li><li>Deep expertise in Zero Trust Architecture frameworks including CISA ZTMM 2.0 and NIST SP 800-207</li><li>Demonstrated experience with CDM program implementation in a federal environment</li><li>Proficiency with enterprise endpoint protection platforms including Qualys, Palo Alto XDR, and Microsoft Defender for Endpoint (MDE)</li><li>Experience with log management and analytics platforms including Splunk, Guardium, and VMware</li><li>Strong background in identity and access management, authentication technologies (F5, PIV/smart card, VLDAP), and enterprise directory integration</li><li>Knowledge of federal IT security requirements including FISMA, NIST SP 800-53, FedRAMP, EO 14028, and OMB M-22-09</li><li>Experience supporting hybrid cloud and on-premises enterprise infrastructure</li><li>Ability to plan, test, and scale deployments in high-availability enterprise environments</li><li>Excellent written and verbal communication skills with demonstrated ability to brief senior government leadership</li></ul><p><b>Preferred Qualifications</b></p><ul><li>Prior experience supporting IRS or Treasury Department cybersecurity programs as a prime, subcontractor, or second-tier subcontractor</li><li>Intimate knowledge of IRS log architecture, data center environments, or IRS-specific systems (BEARS, TIGTA, LOGC)</li><li>Experience supporting a federal security operations center (SOC)</li><li>Registration or familiarity with the DHS CISA CDM Approved Products List (APL)</li><li>Relevant certifications such as CISSP, SABSA, TOGAF, or equivalent</li></ul><p><b>Clearance</b></p><p>Public Trust &mdash; Medium Background Investigation (MBI) required. Candidates with an existing favorable adjudication on file with FPS or IRS, or a prior MBI within the last year at the same or lower risk level, are strongly preferred. Candidate must be able to obtain Staff-Like Access (SLA) within 60 days of contract award. Pre-screening will be conducted at contractor expense.</p><p><b>Work Schedule and Location</b></p><p>Core hours are 0800&ndash;1700 EST, Monday&ndash;Friday. Place of performance is IRS headquarters, 5000 Ellin Rd, New Carrollton, MD. Hybrid schedule may be negotiable; candidates should expect a primarily onsite or hybrid commitment given the embedded nature of the role and system access requirements. Candidates in the DC/MD/VA metro area or willing to commute regularly are strongly preferred.</p><p>Pay: $250,000.00 - $275,000.00 per year</p><p>Benefits:</p><ul><li>401(k)</li><li>Dental insurance</li><li>Health insurance</li><li>Paid time off</li><li>Vision insurance</li></ul><p>Application Question(s):</p><ul><li>Do you currently possess a IRS MBI Public Trust? </li></ul><p>Work Location: Hybrid remote in New Carrollton, MD 20784</p>

IRS Cybersecurity Enterprise Architect (IRS MBI, Public Trust Required)

Openkyber

<div><p><b>Sr. CISSP Security Architect McLean, Virginia / Dallas, Texas / Memphis, Tennessee (HYBRID) 2+ Year Contract (5752)</b></p>
<p>IMMEDIATE NEW JOB OPENING for a Sr. Application Security Architect focused on IAM to join our team and work in a hybrid role at one of our client s global HQs based out of McLean, VA, Dallas, TX, or Memphis, TN. As a Senior Lead Security Architect, you will lead the security architecture efforts for our flagship customer-facing initiatives across web, mobile, APIs, property and payments platforms, impacting 230 million global customers, thousands of partners, and employees. Having a strong background in software engineering, product and application security, you will integrate with delivery teams as a Product and Software Security SME, providing detailed consultation and collaboration to ensure software solutions are secure, resilient, and adhere to our security and industry standards. Your recommendations on security requirements, architecture patterns, and controls will play an important role in safeguarding our customer-facing deliverables.</p>
<p><b>Responsibilities:</b></p>
<ul><li>Lead security aspects of product delivery by defining secure-by-default patterns and architecture guardrails that materially reduce vulnerabilities and risk in released customer-facing products.</li>
<li>Contribute to the continuous development, review, and adoption of our security standards and best practices.</li>
<li>Design and maintain advanced security reference architectures that are secure, scalable, resilient, and align with our overall architecture models spanning web/mobile/API, AWS cloud, and AI-enabled architectures (RAG, agentic, MCP).</li>
<li>Collaborate with cross-functional teams, including engineering, development, platform, and operations, to ensure security is integrated across the full system lifecycle from design through deployment and operations.</li>
<li>Design and/or review product solution architectures to ensure they are secure, scalable, resilient, and seamlessly integrate with our overarching architecture models.</li>
<li>Define security designs and guardrails that prevent common customer-facing threats such as account takeover/credential stuffing, authorization weaknesses, request tampering, injection-style flaws, abuse/bot activity, and sensitive data exposure translating threat scenarios into actionable architecture requirements and reusable patterns.</li>
<li>Own and evolve security reference architectures and standards for customer-facing platforms, including API security (authN/authZ patterns, identity propagation, rate limiting, schema validation), customer identity (OAuth 2.1, OpenID Connect, SAML 2.0), and AWS cloud security (least-privilege IAM, network segmentation, encryption/key management, secrets management, logging/monitoring strategy, and CI/CD + IaC guardrails).</li>
<li>Design and review secure architectures for AI-enabled features across customer-facing platforms, including RAG pipelines, agentic workflows, and Model Context Protocol (MCP) integrations, ensuring privacy, integrity, and resilience to misuse and abuse. You will define guardrails for data ingestion/retrieval, tool permissions, sensitive data handling, output controls, and auditability.</li>
<li>Play a key role in the continuous development, review, and adoption of our security standards and best practices, ensuring they evolve to meet emerging threats and industry advancements.</li>
<li>Actively engage in governance processes related to platform and application security, ensuring compliance with technology standards and regulatory requirements.</li>
<li>Develop, document, and maintain security reference architectures and standards.</li>
</ul><p><b>Requirements:</b></p>
<ul><li>7 years of professional work experience in Technology or related field.</li>
<li>3 years of software development or enterprise architecture experience.</li>
<li>5 years of combined work experience in Product Security, Enterprise Architecture, Customer Identity &amp; Access Management (IAM), Cloud Security, Cryptography, AI Security, and/or Payments Security.</li>
<li>Understand Customer Identity and Authentication technologies, such as OAuth 2.0, OpenID Connect, SAML 2.0, API Security, and AWS IAM security.</li>
<li>You have strong cryptography fundamentals, understand payment security patterns, and solutions for preventing customer fraud.</li>
<li>Familiarity of various industry regulations such as PCI DSS, various data protection and privacy laws and regulations such as GDPR, CCPA, NIST 800-53, SOC2, ISO 27001, PSD2/SCA, etc.</li>
<li>Demonstrated experience delivering security architecture solutions and the ability to partner effectively with business and technology stakeholders, articulating security design decisions clearly and pragmatically required.</li>
<li>Excellent communication, presentation, and interpersonal skills.</li>
<li>Bachelor s Degree, or associate s degree plus 7+ years of Technology related experience, or High School Degree/GED plus 7+ years of Technology related experience.</li>
<li>2 years as a senior security architect and 5 years of professional work experience in Technology or security field.</li>
<li>1 or more cyber industry certifications such as CISSP, AWS Solution Architect (Associate level or Professional level) or AWS Security Specialty certification preferred</li>
<li>Preferably 2 to 3 years of strong software engineering and/or software development experience</li>
<li>Experience in the hospitality industry preferred</li>
</ul><p><b>To view all of our open positions, please visit our OpenKyber website.</b></p>
<p><b>For applications and inquiries, contact:</b> hirings@openkyber.com</p></div>

Senior AI Security Engineer

Hanford Mission Integration Solutions

<div></div><div><div><div><div><div>Position Number</div><div><b> 40956</b></div>
</div><br>
<div><div>Company</div><div><b> Hanford Mission Integration So</b></div>
</div><br>
<div><div>City/State</div><div><b> Richland, WA</b></div>
</div><br>
<div><div>Location</div><div><b> 2345STEVENS/RCHN</b></div>
</div><br>
<div><div>Posted</div><div><b> 03/19/2026</b></div>
</div><br>
<div><div>Closes</div><div><b> 04/02/2026</b></div>
</div><br>
<div><div>Regular/Temporary</div><div><b> Regular</b></div>
</div><br>
<div><div>Full/Part-Time</div><div><b> Full-Time</b></div><br>
</div><br>
</div></div><div><br>
<b>Job Duties/Scope Of Work
</b><br>
This Enterprise Security and Privacy Architect position will provide support to the HMIS Information Management Services group and report to the Chief Enterprise Architect in designing, implementing, and maintaining a comprehensive security and privacy architecture(s) for The Hanford Field Office (HFO). Primary job duties include, but are not limited to the following:
<br>
<br>
<ul><li>Develop, maintain and document the HFO enterprise security and privacy architecture(s), including network security, application security, data security, and cloud security. Including a general support and industrial control system operating environment.
</li><li>Design and implement a comprehensive Zero Trust Architecture (ZTA) strategy, including micro-segmentation, continuous authentication, and policy enforcement.</li><li>Define and implement security standards and best practices in alignment with NIST Special Publications (e.g., SP 800-53, SP 800-82), FISMA, and other relevant federal regulations and directives.</li><li>Evaluate and recommend security technologies and solutions to enhance the HFO's security posture.</li><li>Create and maintain detailed security architecture design documentation, including diagrams, policies, procedures and reference architecture packages.</li><li>Lead and/or participate in security audits and evaluations.</li><li>Ensure compliance with federal privacy regulations, including the Privacy Act and other relevant statutes.</li><li>Design and implement data protection strategies, including data encryption, data loss prevention (DLP), and data masking.</li><li>Conduct privacy impact evaluations and develop privacy strategies to mitigate risks.</li><li>Collaborate with cybersecurity, legal and privacy teams to address privacy-related architectural issues.</li><li>Integrate Privacy Controls: Collaborate with cross-functional teams including cybersecurity to integrate privacy controls into the enterprise architecture, ensuring compliance with regulatory requirements and safeguarding sensitive data throughout its lifecycle.</li><li>Participate in Governance Boards: Actively represent the EA program on governance boards, providing expert guidance on security and privacy matters to influence policy development and strategic decision-making.</li><li>Engage in Project Teams: Serve as a key member of project teams, ensuring that security and privacy considerations are incorporated into project plans and deliverables, and that architectural standards are upheld.</li><li>Lead Workgroups for Security Initiatives: Facilitate and lead workgroups focused on security and privacy initiatives, driving collaboration and consensus among stakeholders to achieve common objectives and enhance the organization's security posture.
</li></ul><br>
<b>Basic Qualifications
</b><br>
Intermediate Level:<br>
<ul><li>BA/BS degree in computer science, information security, or a related field or equivalent combination of education and experience.</li><li>8 plus years of experience in security architecture design and implementation, preferably in a federal government environment.</li><li>4 years' experience with cloud security and cloud service providers (e.g., AWS, Azure, GCP).</li><li>Excellent communication, collaboration, and problem-solving skills.</li><li>Ability to obtain and maintain a DOE &quot;Q&quot; security clearance.</li><li>Ability to obtain and maintain a Personal Identity Verification (PIV) Credential badge.</li></ul><br>
Advanced/Senior Level: (in addition to Intermediate Level)<br>
<ul><li>BA/BS degree in computer science, information security, or a related field or equivalent combination of education and experience.</li><li>10 plus years of experience in security architecture design and implementation, preferably in a federal government environment.</li><li>6 years' experience with cloud security and cloud service providers (e.g., AWS, Azure, GCP).
</li></ul><br>
<b>Desired Qualifications
</b><br>
*Relevant security certifications (e.g., [CISSP] Certified Information Systems Security Professional, [CISM] Certified Information Security Manager, [CCSP] Certified Cloud Security Professional, [TOGAF] The Open Group Architecture Framework) are highly desirable.<br>
<ul><li>Master's degree in computer science, information security, or a related field
</li><li>Extensive knowledge of federal security frameworks and regulations, including FISMA, NIST, and OMB memorandums.</li><li>Proven experience in designing and implementing Zero Trust Architecture (ZTA), Identity and Access Management (IAM), and Multi-Factor Authentication (MFA) solutions.
</li></ul><br>
<b>Compensation &amp; Benefits
</b><br>
Intermediate Level:<br>
Grade 18: $109,013 - $137,538<br>
Grade 19: $119,813 - $151,038<br>
<br>
Advanced/Senior Level:<br>
Grade 20: $131,888 - $166,263<br>
Grade 21: $145,150 - $183,050<br>
Grade 22: $162,863 - $214,288<br>
<br>
HMIS offers a comprehensive benefits package that includes medical/dental/vision, short-and long-term disability, life insurance, 401(k) plan, and paid time off. For a full list of benefits please visit our benefits website: https://hmis.hanford.gov/hr/page.cfm/employeebenefits<br>
<br>
In accordance with the HMIS salary determination process, offers will be made by taking into consideration the level of assigned job duties, responsibilities, and the candidate's qualifications relative to internal peers and the external labor market. A candidate's salary history will not be used in compensation decisions. The salary range listed represents the full range of salary that may be offered.<br>
<br>
In compliance with Homeland Security Presidential Directive 12 (HSPD-12) and Department of Energy (DOE) Hanford Field Office (HFO) direction, employees issued initial badges on or after September 1st, 2025, are required to obtain and maintain a HSPD-12 Personal Identity Verification (PIV) Credential. To obtain this credential, new employees must successfully complete and pass a federal background check investigation. This investigation encompasses multiple areas of eligibility and includes a declaration of illegal drug activities, including use, supply, possession, or manufacture within the last year. This includes marijuana and cannabis derivatives, which are still considered illegal under federal law, regardless of state laws.<br>
<br>
</div><div><div><div><div>Relocation Funding Provided</div><div><b> Yes</b></div>
</div><br>
<div><div>U.S. Citizenship Required</div><div><b> Yes</b></div>
</div><br>
<div><div>Clearance Required</div><div><b> Yes</b></div>
</div><br>
<div><div>Job Classification</div><div><b> Exempt</b></div>
</div><br>
<div><div>Shift Work Required</div><div><b> No</b></div></div></div></div></div>

Enterprise Sec Privacy Archit

Akima

<div>Company Overview:
<p></p><h3 class="jobSectionHeader"><b>
Work Where it Matters</b></h3><div><p>
Suvi, an Akima company, is not just another federal mission services contractor. As an Alaska Native Corporation (ANC), our mission and purpose extend beyond our exciting federal projects as we support our shareholder communities in Alaska.</p><p>
At Suvi, the work you do every day makes a difference in the lives of our 15,000 I&ntilde;upiat shareholders, a group of Alaska natives from one of the most remote and harshest environments in the United States.</p><p></p><p><b><br>
For our shareholders</b>, Suvi provides support and employment opportunities and contributes to the survival of a culture that has thrived above the Arctic Circle for more than 10,000 years.</p><p></p><p><b><br>
For our government customers</b>, Suvi delivers subject matter experts, an agile management approach, and innovative technologies that accomplish customers&rsquo; missions safely, securely, and efficiently.</p><p></p><p><b><br>
As a Suvi employee</b>, you will be surrounded by a challenging, yet supportive work environment that is committed to innovation and diversity, two of our most important values. You will also have access to our comprehensive benefits and competitive pay in addition to growth opportunities and excellent retirement options.</p></div>
Description:
<div></div><div><div><div><div><div><div><div><p>
SUVI is seeking a highly experienced HOPEX Architect to lead and elevate our enterprise architecture platform while driving greater strategic impact across the organization. This role offers the opportunity to take full ownership of the HOPEX application, overseeing administration, configuration, data integration, and vendor engagement to ensure the platform delivers maximum value. To join our team of outstanding professionals, apply today!</p><p></p><p><br>
The ideal candidate brings strong hands-on expertise with HOPEX and a proven ability to manage architecture repositories, strengthen data governance, and produce executive level insights that support informed decision making. You will partner closely with domain architects to ensure the accuracy and consistency of enterprise architecture data, including managing integrations with systems such as ServiceNow and Microsoft Entra.</p><p></p><p><br>
This is a high impact role focused on transforming our enterprise architecture platform from a static documentation tool into a dynamic strategic asset. Your work will directly support modernization efforts, innovation initiatives, executive visibility, and long-term IT planning.</p><p>
If you are passionate about turning data into strategy and want to play a key role in shaping the future of enterprise architecture at SUVI, we encourage you to apply.</p></div></div></div></div></div></div></div>
Responsibilities:
<ul><li>Serve as the primary technical owner and expert for the HOPEX platform, managing all aspects of its configuration, operations, maintenance and optimization to support enterprise architecture activities.</li><li>
Act as the main point of contact for the vendor (BizzDesign/MEGA), leading all communications regarding issue resolution, technical support, enhancement requests and license management.</li><li>
Develop and manage data integration between HOPEX and other authoritative systems, including ServiceNow, Entra ID, HR and Financial systems, to ensure a single, reliable source of truth for architectural data.</li><li>
Enforce EA data governance by creating and maintaining modeling standards, meta-model and meta-data practices, naming conventions, and governance (roles, access, and validation rules) within the architecture repository.</li><li>
Administer the day-to-day technical health of the platform, overseeing configuration changes, workflow development, dashboard creation, user access, and release/upgrade cycles.</li><li>
Collaborate with solution architects to ensure the consistency and quality of architectural models, verifying interdependencies and tracing requirements to maintain auditability.</li><li>
Coordinate with domain specific architects to manage strategic portfolios within HOPEX, including applications, technologies, data, and projects, to align IT investments with strategic objectives and support modernization roadmaps.</li><li>
Produce executive-level dashboards, reports, and scenario models to support strategic analysis, guide investment planning, and inform leadership decision-making on topics like application rationalization and risk mitigation.</li></ul>
Qualifications:
<ul><li>Active Secret Clearance.</li><li>
Bachelor&rsquo;s degree in a technical field such as Computer Science, Engineering, or Information Technology, or equivalent experience.
</li><li>7+ years of deep, hands-on experience as a HOPEX Architect with demonstrated expertise in platform administration, configuration, operations, maintenance, and optimization.</li><li>
Proven proficiency in applying enterprise architecture frameworks, specifically TOGAF and DoDAF, within a government or large enterprise environment.</li></ul><p><b>
Preferred Qualifications:</b></p><ul><li>
Master&rsquo;s degree in relevant technical or engineering discipline.</li><li>
10+ years of experience in IT service delivery, with a strong preference for experience within DoD or other federal government agencies.</li><li>
Demonstrated experience integrating HOPEX with other enterprise platforms, particularly ServiceNow, CMDBs, and Entra ID.</li><li>
Relevant professional certifications, such as:</li><li><ul><li>
MEGA HOPEX Practitioner Certification (or other official vendor training).</li><li>
TOGAF&reg; 9 Certified (provided by the Open Group) and/or DODAF Certified (Federal Enterprise Architecture Certification (FEAC) Institute provides training that leads to DoDAF certification).</li><li>
ITIL (Information Technology Infrastructure Library) and/or COBIT (Control Objectives for Information and Related Technologies).</li><li>
CompTIA Security+ (or another DoD 8570/8140 compliant certification).</li></ul></li></ul>
Job ID: 2026-22203 Work Type: On-Site</div>

HOPEX Enterprise Architect (Active Secret Clearance)

Search 10000+ Enterprise security architect jobs near you this March. New roles added regularly across leading industries. Apply today.