وصف الوظيفة
This position is for a Senior IT Cybersecurity Specialist (ENTARCH) located in the Office of the Chief Information Officer (OCIO) at the Federal Housing Finance Agency (FHFA). In this role, the incumbent will serve as a principal technical authority responsible for establishing and governing enterprise cybersecurity architecture, secure engineering practices, and long-range security modernization strategy.
Office of the Chief Information Officer The Office of Chief Information Officer (OCIO) is responsible for ensuring the integrity, confidentiality, and availability of FHFA's information systems and assets. The Office maintains the Agency's information technology (IT) infrastructure; oversees the IT security program; develops and maintains custom applications and data repositories; manages technology resources, investments, and assets; establishes IT strategic plans, policies, and procedures; supports business partners; and manages the Agency's records and information management program. Position Overview The Senior IT Cybersecurity Specialist (ENTARCH) will provide high-level expertise across cloud security, identity architecture, Zero Trust, network segmentation, application/container security, and enterprise monitoring capabilities. This role is critical to shaping the agency's cybersecurity posture and ensuring compliance with federal mandates including FISMA, CISA, OMB, Executive Orders, and NIST frameworks. Operating with substantial independence, the architect leads multi-disciplinary technical efforts, advises executives, and ensures the secure evolution of the agency's technology environment. The Senior IT Cybersecurity Specialist (ENTARCH) is also responsible for defining and implementing secure enterprise architectures, engineering complex cybersecurity solutions, and integrating federal security mandates across the agency's technology stack. Major Duties & Responsibilities Design and support enterprise cybersecurity architectures across identity, devices, networks, applications, and data within a Zero Trust model. Develop secure architectures for hybrid cloud, Microsoft 365, identity services, and container ecosystems. Establish technical patterns and consult on engineering standards. Support cybersecurity modernization initiatives by defining technical requirements, dependencies, and measurable implementation outcomes. Work with cloud, network, engineering, and application teams to coordinate secure integration and configuration of new technologies. Implement enterprise security capabilities including identity management, privileged access controls, segmentation, Security Information and Event Management (SIEM)/Security Orchestration, Automation, and Response (SOAR), logging modernization, and automated monitoring. Conduct threat modeling, Application Programming Interface (API) security analysis, encryption design, secrets management, and supply chain risk assessments including Software Bill of Materials (SBOM) validation. Apply Artificial Intelligence (AI)/Machine Learning (ML) and predictive analytics to enhance detection, automation, and decision making within cybersecurity workflows. Perform other duties as assigned.
You may qualify for your desired series and grade level if you meet the following qualification requirements: BASIC REQUIREMENTS: To be eligible for the 2210 series, you must have IT-related experience demonstrating each of the four competencies listed below: Attention to Detail - Is thorough when performing work and conscientious about attending to detail. Customer Service - Works with clients and customers (that is, any individuals who use or receive the services or products that your work unit produces, including the general public, individuals who work in the agency, other agencies, or organizations outside the Government) to assess their needs, provide information or assistance, resolve their problems, or satisfy their expectations; knows about available products and services; is committed to providing quality products and services. Oral Communication - Expresses information (for example, ideas or facts) to individuals or groups effectively, taking into account the audience and nature of the information (for example, technical, sensitive, controversial); makes clear and convincing oral presentations; listens to others, attends to nonverbal cues, and responds appropriately. Problem Solving - Identifies problems; determines accuracy and relevance of information; uses sound judgment to generate and evaluate alternatives, and to make recommendations. In addition to meeting the basic requirements listed above, applicants must also meet the following minimum qualifications for their desired grade level: MINIMUM QUALIFICATIONS: Minimum Qualification EL-13: Applicants must have 52 weeks (one-year) of specialized experience equivalent to the next lower grade level as described below. Experience: I qualify for the EL/GS-13 because I have at least 52 weeks of specialized experience at the EL/GS-12 or equivalent demonstrating work experience with the statements described below. Examples of specialized experience include: Designing Zero-Trust aligned architectures across identity, cloud, networks, applications, and/or data to strengthen enterprise cybersecurity posture. Engineering and integrating secure solutions for hybrid cloud, Microsoft 365, identity platforms, and/or containerized environments in order to resolve architectural gaps and misconfiguration. Participating in enterprise-wide cybersecurity modernization such as defining technical requirements, coordinating multi-team integration efforts, and delivering measurable improvements to cloud, identity, application, and/or infrastructure security. Performing threat modeling, API security reviews, supply chain assessment, and validating System Security Plans (SSPs) and audit artifacts while translating Federal mandates into technical requirements Experience refers to paid and unpaid experience, including volunteer work done through National Service programs (e.g., Peace Corps, AmeriCorps) and other organizations (e.g., professional; philanthropic; religious; spiritual; community, student, social). Volunteer work helps build critical competencies, knowledge, and skills and can provide valuable training and experience that translates directly to paid employment. You will receive credit for all qualifying experience, including volunteer experience.
Source and application: Official federal vacancy data provided by USAJOBS. Apply on the original USAJOBS listing.
View the original job listing. SecurityTalent is displaying an aggregated listing and does not represent that the employer has claimed or verified this record.
