Enterprise Architect

Develops and maintains business, systems, and information processes to support enterprise mission needs; develops information technology (IT) rules and requirements that describe baseline and target architectures.

Knowledge Requirements

• Knowledge of computer networking concepts and protocols, and network security methodologies.
• Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).
• Knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity and privacy.
• Knowledge of cybersecurity and privacy principles.
• Knowledge of cyber threats and vulnerabilities.
• Knowledge of specific operational impacts of cybersecurity lapses.
• Knowledge of database systems.
• Knowledge of organization's enterprise information security architecture.
• Knowledge of organization's evaluation and validation requirements.
• Knowledge of electrical engineering as applied to computer architecture (e.g., circuit boards, processors, chips, and computer hardware).
• Knowledge of installation, integration, and optimization of system components.
• Knowledge of Security Assessment and Authorization process.
• Knowledge of industry-standard and organizationally accepted analysis principles and methods.
• Knowledge of cybersecurity and privacy principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
• Knowledge of mathematics (e.g., logarithms, trigonometry, linear algebra, calculus, statistics, and operational analysis).
• Knowledge of network access, identity, and access management (e.g., public key infrastructure, Oauth, OpenID, SAML, SPML).
• Knowledge of operating systems.
• Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol (TCP) and Internet Protocol (IP), Open System Interconnection Model (OSI), Information Technology Infrastructure Library, current version (ITIL)).
• Knowledge of parallel and distributed computing concepts.
• Knowledge of key concepts in security management (e.g., Release Management, Patch Management).
• Knowledge of security system design tools, methods, and techniques.
• Knowledge of software engineering.
• Knowledge of systems testing and evaluation methods.
• Knowledge of telecommunications concepts (e.g., Communications channel, Systems Link Budgeting, Spectral efficiency, Multiplexing).
• Knowledge of the systems engineering process.
• Knowledge of critical infrastructure systems with information communication technology that were designed without system security considerations.
• Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).
• Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.
• Knowledge of organizational process improvement concepts and process maturity models (e.g., Capability Maturity Model Integration (CMMI) for Development, CMMI for Services, and CMMI for Acquisitions).
• Knowledge of service management concepts for networks and related standards (e.g., Information Technology Infrastructure Library, current version (ITIL)).
• Knowledge of security models (e.g., Bell-LaPadula model, Biba integrity model, Clark-Wilson integrity model).
• Knowledge of circuit analysis.
• Knowledge of confidentiality, integrity, and availability requirements.
• Knowledge of cybersecurity-enabled software products.
• Knowledge of the Risk Management Framework Assessment Methodology.
• Knowledge of various types of computer architectures.
• Knowledge of multi-level security systems and cross domain solutions.
• Knowledge of program protection planning (e.g. information technology (IT) supply chain security/risk management policies, anti-tampering techniques, and requirements).
• Knowledge of configuration management techniques.
• Knowledge of N-tiered typologies (e.g. including server and client operating systems).
• Knowledge of an organization's information classification program and procedures for information compromise.
• Knowledge of the enterprise information technology (IT) architectural concepts and patterns (e.g., baseline, validated design, and target architectures.)
• Knowledge of integrating the organization's goals and objectives into the architecture.
• Knowledge in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.
• Knowledge of embedded systems.
• Knowledge of system fault tolerance methodologies.
• Knowledge of Information Theory (e.g., source coding, channel coding, algorithm complexity theory, and data compression).
• Knowledge of demilitarized zones.
• Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services.
• Knowledge of network design processes, to include understanding of security objectives, operational objectives, and trade-offs.
• Knowledge of network security (e.g., encryption, firewalls, authentication, honey pots, perimeter protection).
• Knowledge of physical and logical network devices and infrastructure to include hubs, switches, routers, firewalls, etc.

Skills and Abilities

• Skill in applying and incorporating information technologies into proposed solutions.
• Skill in designing the integration of hardware and software solutions.
• Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.
• Skill in design modeling and building use cases (e.g., unified modeling language).
• Skill in writing code in a currently supported programming language (e.g., Java, C++).
• Skill in the use of design methods.
• Skill to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
• Skill to identify cybersecurity and privacy issues that stem from connections with internal and external customers and partner organizations.
• Ability to apply the methods, standards, and approaches for describing, analyzing, and documenting an organization's enterprise information technology (IT) architecture (e.g., Open Group Architecture Framework (TOGAF), Department of Defense Architecture Framework (DoDAF), Federal Enterprise Architecture Framework (FEAF)).
• Ability to conduct vulnerability scans and recognize vulnerabilities in security systems.
• Ability to apply an organization's goals and objectives to develop and maintain architecture.
• Ability to optimize systems to meet enterprise performance requirements.
• Ability to execute technology integration processes.
• Ability to build architectures and frameworks.
• Ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
• Ability to identify critical infrastructure systems with information communication technology that were designed without system security considerations.
• Ability to set up a physical or logical sub-networks that separates an internal local area network (LAN) from other untrusted networks.
• Define appropriate levels of system availability based on critical system functions and ensure that system requirements identify appropriate disaster recovery and continuity of operations requirements to include any appropriate fail-over/alternate site requirements, backup requirements, and material supportability requirements for system recover/restoration.
• Ensure that acquired or developed system(s) and architecture(s) are consistent with organization's cybersecurity architecture guidelines.
• Identify and prioritize critical business functions in collaboration with organizational stakeholders.
• Provide input to the Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials).
• Analyze candidate architectures, allocate security services, and select security mechanisms.
• Develop a system security context, a preliminary system security Concept of Operations (CONOPS), and define baseline system security requirements in accordance with applicable cybersecurity requirements.
• Evaluate security architectures and designs to determine the adequacy of security design and architecture proposed or provided in response to requirements contained in acquisition documents.
• Write detailed functional specifications that document the architecture development process.
• Analyze user needs and requirements to plan architecture.
• Capture and integrate essential system capabilities or business functions required for partial or full system restoration after a catastrophic failure event.
• Develop enterprise architecture or system components required to meet user needs.
• Document and update as necessary all definition and architecture activities.
• Integrate results regarding the identification of gaps in security architecture.
• Plan implementation strategy to ensure that enterprise components can be integrated and aligned.
• Translate proposed capabilities into technical requirements.
• Document how the implementation of a new system or new interface between systems impacts the current and target environment including but not limited to security posture.
• Integrate key management functions as related to cyberspace.