Enterprise Architect

Develops and maintains business, systems, and information processes to support enterprise mission needs; develops information technology (IT) rules and requirements that describe baseline and target architectures.
  • Knowledge of computer networking concepts and protocols, and network security methodologies.
  • Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
  • Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.
  • Knowledge of cybersecurity and privacy principles.
  • Knowledge of cyber threats and vulnerabilities.
  • Knowledge of specific operational impacts of cybersecurity lapses.
  • Knowledge of database systems.
  • Knowledge of organization's enterprise information security architecture.
  • Knowledge of organization's evaluation and validation requirements.
  • Knowledge of electrical engineering as applied to computer architecture (e.g., circuit boards, processors, chips, and computer hardware).
  • Knowledge of installation, integration, and optimization of system components.
  • Knowledge of Security Assessment and Authorization process.
  • Knowledge of industry-standard and organizationally accepted analysis principles and methods.
  • Knowledge of cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
  • Knowledge of mathematics (e.g. logarithms, trigonometry, linear algebra, calculus, statistics, and operational analysis).
  • Knowledge of network access, identity, and access management (e.g., public key infrastructure, Oauth, OpenID, SAML, SPML).
  • Knowledge of operating systems.
  • Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol [TCP] and Internet Protocol [IP], Open System Interconnection Model [OSI], Information Technology Infrastructure Library, current version [ITIL]).
  • Knowledge of parallel and distributed computing concepts.
  • Knowledge of key concepts in security management (e.g., Release Management, Patch Management).
  • Knowledge of security system design tools, methods, and techniques.
  • Knowledge of software engineering.
  • Knowledge of systems testing and evaluation methods.
  • Knowledge of telecommunications concepts (e.g., Communications channel, Systems Link Budgeting, Spectral efficiency, Multiplexing).
  • Knowledge of the systems engineering process.
  • Knowledge of critical infrastructure systems with information communication technology that were designed without system security considerations.
  • Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).
  • Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.
  • Knowledge of organizational process improvement concepts and process maturity models (e.g., Capability Maturity Model Integration (CMMI) for Development, CMMI for Services, and CMMI for Acquisitions).
  • Knowledge of service management concepts for networks and related standards (e.g., Information Technology Infrastructure Library, current version [ITIL]).
  • Knowledge of security models (e.g., Bell-LaPadula model, Biba integrity model, Clark-Wilson integrity model).
  • Knowledge of circuit analysis.
  • Knowledge of confidentiality, integrity, and availability requirements.
  • Knowledge of cybersecurity-enabled software products.
  • Knowledge of the Risk Management Framework Assessment Methodology.
  • Knowledge of various types of computer architectures.
  • Knowledge of multi-level security systems and cross domain solutions.
  • Knowledge of program protection planning (e.g. information technology (IT) supply chain security/risk management policies, anti-tampering techniques, and requirements).
  • Knowledge of configuration management techniques.
  • Knowledge of N-tiered typologies (e.g. including server and client operating systems).
  • Knowledge of an organization's information classification program and procedures for information compromise.
  • Knowledge of the enterprise information technology (IT) architectural concepts and patterns (e.g., baseline, validated design, and target architectures.)
  • Knowledge of integrating the organization's goals and objectives into the architecture.
  • Knowledge in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.
  • Knowledge of embedded systems.
  • Knowledge of system fault tolerance methodologies.
  • Knowledge of Information Theory (e.g., source coding, channel coding, algorithm complexity theory, and data compression).
  • Knowledge of demilitarized zones.
  • Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services.
  • Knowledge of network design processes, to include understanding of security objectives, operational objectives, and trade-offs.
  • Knowledge of network security (e.g., encryption, firewalls, authentication, honey pots, perimeter protection).
  • Knowledge of physical and logical network devices and infrastructure to include hubs, switches, routers, firewalls, etc.
  • Skill in applying and incorporating information technologies into proposed solutions.
  • Skill in designing the integration of hardware and software solutions.
  • Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.
  • Skill in design modeling and building use cases (e.g., unified modeling language).
  • Skill in writing code in a currently supported programming language (e.g., Java, C++).
  • Skill in the use of design methods.
  • Skill to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
  • Skill to identify cybersecurity and privacy issues that stem from connections with internal and external customers and partner organizations.
  • Ability to apply the methods, standards, and approaches for describing, analyzing, and documenting an organization's enterprise information technology (IT) architecture (e.g., Open Group Architecture Framework [TOGAF], Department of Defense Architecture Framework [DoDAF], Federal Enterprise Architecture Framework [FEAF]).
  • Ability to conduct vulnerability scans and recognize vulnerabilities in security systems.
  • Ability to apply an organization's goals and objectives to develop and maintain architecture.
  • Ability to optimize systems to meet enterprise performance requirements.
  • Ability to execute technology integration processes.
  • Ability to build architectures and frameworks.
  • Ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
  • Ability to identify critical infrastructure systems with information communication technology that were designed without system security considerations.
  • Ability to set up a physical or logical sub-networks that separates an internal local area network (LAN) from other untrusted networks.
  • Define appropriate levels of system availability based on critical system functions and ensure that system requirements identify appropriate disaster recovery and continuity of operations requirements to include any appropriate fail-over/alternate site requirements, backup requirements, and material supportability requirements for system recover/restoration.
  • Employ secure configuration management processes.
  • Ensure that acquired or developed system(s) and architecture(s) are consistent with organization's cybersecurity architecture guidelines.
  • Identify and prioritize critical business functions in collaboration with organizational stakeholders.
  • Provide advice on project costs, design concepts, or design changes.
  • Provide input to the Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials).
  • Analyze candidate architectures, allocate security services, and select security mechanisms.
  • Develop a system security context, a preliminary system security Concept of Operations (CONOPS), and define baseline system security requirements in accordance with applicable cybersecurity requirements.
  • Evaluate security architectures and designs to determine the adequacy of security design and architecture proposed or provided in response to requirements contained in acquisition documents.
  • Write detailed functional specifications that document the architecture development process.
  • Analyze user needs and requirements to plan architecture.
  • Capture and integrate essential system capabilities or business functions required for partial or full system restoration after a catastrophic failure event.
  • Develop enterprise architecture or system components required to meet user needs.
  • Document and update as necessary all definition and architecture activities.
  • Integrate results regarding the identification of gaps in security architecture.
  • Plan implementation strategy to ensure that enterprise components can be integrated and aligned.
  • Translate proposed capabilities into technical requirements.
  • Document how the implementation of a new system or new interface between systems impacts the current and target environment including but not limited to security posture.
  • Integrate key management functions as related to cyberspace.