Security Architect

Please paste the following URL into a browser to view the entire job posting on the CAPPS Careers page.https://erphcmprd.cpa.texas.gov/psp/candidateportal/EMPLOYEE/HRMS/c/HRS\_HRAM\_FL.HRS\_CG\_SEARCH\_FL.GBL?Page=HRS\_APP\_JBPST\_FLandAction=UandFOCUS=ApplicantandSiteId=1andJobOpeningId=106589andPostingSeq=1Agency InformationServe Texas with private-sector urgency and public-sector purpose.Every dollar the State of Texas collects, holds, or spends runs through the Comptroller's Office. We are the state's chief tax collector, accountant, revenue estimator, treasurer, and purchasing manager. We write the checks and keep the books for the multi-billion-dollar business of state government, and we serve virtually every Texan while doing it.Texans trust us with their money. We earn that trust every day by safeguarding taxpayer dollars, cutting waste, and finding better, faster, more efficient ways to get the job done.This is not a place to coast. The work is demanding, the pace is fast, and the standards are high. We want people who take ownership, question the status quo, and think creatively seeing beyond the obvious to solve the problems facing Texans. We measure ourselves by results. If you're driven by the idea that government can work better, and willing to work hard to prove it, you'll fit in here.What you'll get in return: real responsibility, meaningful work, and the chance to build your career alongside sharp, mission-focused professionals. We invest in people who invest in the job, with on-the-job training, professional development, and room to grow as fast as your performance allows.Public service is a calling. If you're ready to make every taxpayer dollar count, we want to hear from you.To stay current on your application, log in to the CAPPS portal to check for status updates. We update it as promptly as possible.Work Hours Monday through Friday, 40 hours a week with occasional evening, weekend hours and holidays. Hours may change based on business need. General DescriptionJoin Information Security Division (ISD) as a Security Architect. This role performs advanced cybersecurity analysis and security architecture support work for the ISD. Serves as the agency's principal security architect responsible for defining the enterprise security architecture, supporting security standards, and common control baselines that govern how security is designed into agency platforms, systems, and services. Serves as the ISD counterpart to the Enterprise Architect in Enterprise IT: the Security Architect will support the defining of security standards, control baselines, and security reference architectures; the Enterprise Architect embeds them into enterprise platforms as inheritable common controls. Aligns security architecture with TAC 477, the Texas Cybersecurity Framework, NIST SP 800-53, and TX-RAMP requirements. This is an individual contributor position with no supervisory responsibilities. Minimum Qualifications Graduation from an accredited college or university with major coursework in cybersecurity, computer science, management information systems, computer engineering, or a related field.Seven (7) years of progressively responsible experience in information security, security engineering, or systems security analysis, including at least three (3) years performing security architecture or security design work. Preferred QualificationsExperience in a Texas state agency or other public-sector environment, including TAC 477, Texas Cybersecurity Framework, TXCC security programs, and TX-RAMP.Experience defining common control frameworks or control inheritance models (e.g., NIST SP 800-53 common/hybrid controls) and authoring control implementation statements.Experience rationalizing or consolidating security tooling portfolios with measurable cost or operational savings.CISSP (ISSAP concentration preferred), CCSP, SABSA, GIAC security architecture credential (e.g., GDSA), or TOGAF certification.Experience supporting security assessm nt and authorization (AandA) or audit activities using inherited control documentation. SubstitutionsOne (1) additional year of minimum experience as stated above may substitute for thirty (30) semester hours of the required education with a maximum substitution of 120 semester hours (four years). Licenses and CertificationsPreferred: CISSP (ISSAP concentration preferred), CCSP, SABSA, GIAC security architecture credential (e.g., GDSA), or TOGAF certification. Essential Job Duties:Security Architecture Strategy Support and StandardsSupport with developing and maintaining the agencys enterprise security architecture, security reference architectures, and target-state security patterns aligned with the enterprise architecture roadmap, agency risk posture, and TXCC statewide security direction.Assist in defining agency security standards, secure design patterns, and platform security requirements derived from TAC 477, the Texas Cybersecurity Framework, NIST SP 800-53, and the agency information security policies and control standards.Serve as the Information Security Division's voting member of the architecture review process; evaluate proposed solutions, platforms, and exceptions for conformance with security standards and risk tolerance. Common Control Baseline Analysis and InheritanceDefine and document common and hybrid control baselines for enterprise platforms (identity, logging, encryption, configuration management, vulnerability management), including implementation statements and inheritance models consumable by system owners.Partner with the Enterprise Architect to ensure enterprise platforms operationalize defined control baselines so that consuming systems inherit controls consistently, reducing per-system control implementation and assessment burden.Validate that implemented platform controls satisfy the defined baselines; maintains traceability between platform capabilities, control statements, and compliance requirements to support assessment and audit activiti