Contract

Middletown, United States | Posted on 09/24/2021

• TheEnterprise Architect will also be tasked with preparing security standards,policies and procedures – as well as mentoring team members and executive staffon security matters. CISSP REQUIRED.


• Thedepartment is seeking an Enterprise Architect to work in conjunction with theModernization Team, as well as the DHS Information Security and Privacy Office,to analyze and document the existing information security environment.


• Conductingsystem security and vulnerability analyses and risk assessments


• Evaluatingthe systems architecture and identifying integration issues


• Serveas Information Security Subject Matter Expert (SME), while working with aSystems Integrator and software vendors, to develop the approach forimplementing an enterprise security infrastructure that ensures compliance tostandards, policies and procedures


• Monitordelivery efforts to ensure compliance to standards, policies, and procedures


• Deliverevidence, demonstrating project deliverables meet federal certificationrequirements


• ImprovesDHS Incident Response efforts by analyzing existing systems/processes andrecommending future technologies and associated processes


• Participatein the RFI/RFP process for systems module selection


• Participatein the procurement process to select a Systems Integrator to execute the DDIphase


• Extensiveexperience designing and implementing enterprise security architectures basedon NIST Risk Management Framework (NIST 800-53), state and federal securitystandards, and security industry best practices


• Anextensive understanding of security tools and software products, includingIdentity Access Management (IAM), Security Incident and Event Management(SIEM), and Cloud Access Security Brokers (CASB)


• In-depthexperience in creating, documenting, and implementing enterprise securitypolicies and standards – including enterprise-wide communication and training