Enterprise IT Security Architect

State of Iowa; Des Moines (IA); On-site; USD 100,000 - 150,000; Full time

Benefits offered by this job

Flexible work environment

IPERS retirement system

Health, dental, and vision insurance

Generous vacation, sick leave, andPaid

Holidays

Life and disability insurance

Retirement savings options (RIC)

Flexible Spending Accounts

Job summary

The State of Iowa’s Department of Management – DoIT seeks an experienced Information Security Architect to design and govern the state's enterprise security architecture. The role embeds security into technology solutions and aligns with national standards to advance the Iowa Cyber Strategy.

You will lead enterprise-wide initiatives, translate policy into measurable controls, and collaborate across agencies to strengthen security architecture and compliance posture.

Qualifications

• Proven expertise in security architecture and enterprise-level design.
• Experience with NIST and RMF frameworks for secure system implementation.
• Knowledge of threat modeling using MITRE ATT&CK and cyber kill chain methodologies.
• Strong collaboration skills to work across agencies and technical teams.
• Ability to translate policy into actionable controls for compliance and audit readiness.
• Forward-thinking approach to address emerging threats and technologies.
• Preferred certifications: CISSP, CISA, GSEC, or equivalent.

Responsibilities

• Develop, implement, and govern the State’s enterprise security architecture framework.
• Define and enforce standards that integrate security controls across systems, platforms, and services.
• Establish scalable controls to maintain a statewide security posture.
• Represent the CISO in interagency committees and strategic planning efforts.
• Promote adoption of CyberGUARD standards and secure architecture practices across agencies.
• Evaluate emerging technologies and evolving threats to strengthen enterprise security architecture.

Skills

Security architecture

NIST RMF

Threat modeling

Cross-agency collaboration

Policy translation

Emerging threats

Cybersecurity strategy

Education

CISSP or equivalent

CISA or GSEC preferred

Job description

The State of Iowa’s Department of Management – DoIT seeks an experienced Information Security Architect to design and govern the state's enterprise security architecture. The role embeds security into technology solutions and aligns with national standards to advance the Iowa Cyber Strategy.

You will lead enterprise-wide initiatives, translate policy into measurable controls, and collaborate across agencies to strengthen security architecture and compliance posture.