Description
Systems Architect IV
Position summary
Serves as the lead architect for the enterprise mobility service, defining and maintaining the technical and operational designs that support secure access from government-furnished and personal devices. Leads current-state and future-state architecture, integration strategy, configuration standards, and modernization planning across mobile platforms, identity services, cloud services, applications, and supporting infrastructure. Translates mission and user requirements into implementable designs that comply with governance and security requirements.
Salary up to: $245K
Principal responsibilities
• Develop and maintain architecture diagrams, interface and dependency maps, technical designs, as-built documentation, administration guides, and current-state and future-state service workflows.
• Define secure architecture for GFE device management and BYOD containerized access, including identity, authorization, application access, data protection, and separation of agency information from personal content.
• Lead architecture and integration planning for IBM MaaS360, Microsoft Intune, Microsoft 365, Active Directory/Azure AD, Apple Business Manager, and Samsung Knox Mobile Enrollment, or agency-approved replacement platforms.
• Develop service requirements and technical roadmaps for unified endpoint management, expanded mobile access to agency systems, and improved collaboration and productivity capabilities.
• Define infrastructure and device configuration baselines, interface agreements, and change and configuration management approaches; coordinate designs with infrastructure, network, cybersecurity, and end-user service owners.
• Establish frameworks and guidelines for mobile application deployment and integration; document functional and nonfunctional requirements with system owners and support proposed technology submissions to Technical Reference Model.
• Integrate applicable security controls, least privilege, encryption, device hardening, and identity-based access into designs; provide architecture artifacts supporting assessments, authorization, and continuous monitoring.
• Develop and maintain mobility disaster recovery plans and testing approaches; establish technical acceptance criteria and review engineering test results before recommending production deployment.
• Assess proposed changes for interoperability, supportability, security, lifecycle cost, and operational impact; obtain required Government approvals and adapt architecture responsibilities to the selected task execution option.
Qualifications
• Bachelor’s degree in computer science, information systems, engineering, or a related technical discipline.
• 10 or more years in enterprise infrastructure or mobility architecture and engineering, including at least 5 years designing or integrating enterprise mobility or endpoint management solutions.
• Demonstrated architecture experience with MDM/UEM, GFE and BYOD models, iOS/iPadOS and Android, containerization, Microsoft 365, identity services, and conditional access.
• Ability to produce technical designs, configuration standards, integration requirements, migration roadmaps, and recovery plans; working knowledge of federal security assessment and authorization processes and applicable NIST guidance.
Preferred qualifications Direct experience with MaaS360 and Intune; architecture or endpoint platform certifications; experience applying Zero Trust principles, designing cloud integrations, and coordinating architecture across federal service providers.