Senior Enterprise Architect

Details: Stefanini is looking for Senior Enterprise Architect in Dover, DE (Hybrid) Work Hours: M-F (37.5 hours) Work Location: Dover, DE (Hybrid) Interview: In-Person only We are looking for a Senior Technical Architect to design, secure and modernize the systems that move people, issue credentials and collect tolls across the state. This is a hands-on senior role: you will set technical direction, and you will also build, review and troubleshoot. You will work across divisions whose systems range from decades-old mainframes to real-time cloud platforms. The work touches public safety, personal data, payment card data and federal compliance, so sound architecture and security judgment matter as much as technical depth. Divisions you will support: You will be the senior technical voice for three divisions with very different systems, users and regulators. Divisions Supported (including but not limited to): Transit: fixed route: CAD/AVL, real-time passenger information, GTFS and GTFS-Realtime feeds, fare collection, onboard networking and vehicle telematics. Real-time data from hundreds of vehicles; public-facing uptime; FTA reporting (NTD). Transit: paratransit: Trip booking, eligibility, scheduling and dispatch, driver tablets, call center integration ADA service obligations; protected health and eligibility data. Transit: microtransit : On-demand booking apps, dynamic routing, third-party platform integrations and APIs, Vendor-hosted SaaS; data sharing and integration with fixed route and paratransit. DMV: Driver licensing and vehicle registration, credential issuance, online services, kiosks, legacy mainframe or COBOL platforms, protected personal data; AAMVA interfaces; REAL ID; high transaction volume. Tolls: Roadside lane systems, back office and customer service centers, transponder and plate-image processing, payment processing, interoperability hubs, 24x7 revenue-critical operations; interstate interoperability. Responsibilities: System design and architecture 347 Define target-state architectures for division systems and the shared platforms that connect them. 347 Lead design reviews and produce architecture decision records, reference architectures and integration patterns. 347 Design for high availability, disaster recovery and defined RTO/RPO targets on revenue- and safety-critical systems. 347 Help to plan modernization of legacy platforms (for example DMV mainframe workloads) through phased, low-risk migration. 347 Design APIs, event streams and data integrations across transit, DMV, tolls and external partners. Security 347 Embed security into architecture from the start, including zero trust, identity and access management, segmentation and encryption. 347 Lead security architecture reviews for new systems and major changes. 347 Align systems with NIST CSF and NIST SP 800-53, and support PCI DSS, CJIS, DPPA and state security policy compliance. 347 Assess OT and roadside system security for toll lanes, onboard transit equipment and field networks. Systems engineering 347 Apply systems engineering practice across the lifecycle: requirements, traceability, interfaces, verification and validation. 347 Follow FHWA Systems Engineering guidance and regional ITS architecture requirements on federally funded projects. 347 Define and manage interface control documents between agency systems and vendor platforms. 347 Guide testing strategy, including integration, performance, failover and user acceptance testing. Cloud and infrastructure 347 Shape and execute the agency's cloud strategy across AWS, Azure or GCP environments, including landing zones and governance. 347 Design hybrid architectures that connect on-premises data centers, field devices and cloud services. 347 Champion infrastructure as code, CI/CD, containerization and automated configuration management. 347 Drive cost management, tagging standards and right-sizing in partnership with finance. 347 Support FedRAMP and StateRAMP evaluation of SaaS and cloud vendors. Vendor, procurement and leadership 347 Review and sometimes write technical requirements for RFPs and evaluate vendor proposals and architectures. 347 Provide technical oversight of system integrators and SaaS providers through delivery and operations. 347 Set technical standards and best practices across teams. 347 Translate technical risk and options into clear recommendations for executives and division leaders. Job Requirements Details: Job Requirements: 347 Bachelor's degree in computer science, information systems, engineering or a related field. Equivalent experience may substitute year for year. 347 10+ years of progressive IT experience, including at least 5 years in an architecture, senior systems engineering or technical lead role. 347 Demonstrated experience designing and delivering large, integrated, mission-critical systems. 347 Hands-on experience with at least one major cloud platform (AWS, Azure or Google Cloud) in production. 347 Working knowledge of security frameworks such as NIST CSF, NIST SP 800-53 or ISO 27001, and of implementing their controls. 347 Experience with networking, identity and access management, Linux and Windows server environments, and relational databases. 347 Experience writing technical requirements and overseeing vendors or system integrators. 347 Ability to pass a criminal background check and fingerprinting, including CJIS-level screening. Preferred qualifications 347 Experience in a state DOT, transit agency, tolling authority, DMV or other public-sector transportation setting. 347 Domain knowledge in one or more of: CAD/AVL and GTFS, paratransit scheduling, AAMVA systems, toll back-office and interoperability, or ITS. 347 Experience modernizing mainframe or legacy platforms. 347 Experience with API management platforms. 347 Experience with PCI DSS environments and payment processing architecture. 347 Familiarity with OT and ICS security for field devices. Knowledge of: 347 Enterprise, solution and integration architecture patterns, including microservices, event-driven design and API-first design. 347 Zero trust architecture, identity federation (SAML, etc), privileged access management and data protection. 347 Hybrid cloud networking, including VPN, private connectivity, DNS, load balancing and SD-WAN. 347 High availability, disaster recovery and business continuity design. 347 Federal and state rules that shape transportation IT, including FTA, FHWA, ADA, DPPA, PCI DSS and CJIS. Skill in: 347 Producing clear architecture diagrams, standards and decision records. 347 Threat modeling and evaluating security controls. 347 Diagnosing complex, multi-system production problems. 347 Evaluating vendor solutions on technical merit, risk and total cost of ownership. Ability to: 347 Explain technical tradeoffs to non-technical leaders and the public. 347 Balance innovation against stability on systems the public relies on daily. 347 Lead through influence across divisions, vendors and partner agencies. 347 Respond to after-hours incidents on critical systems when needed. Working conditions: Primarily office or hybrid work. Occasional travel to division sites, transit facilities, DMV offices, toll facilities and data centers. Possible after-hours and on-call support for critical incidents and maintenance windows. Listed salary ranges may vary based on experience, qualifications, and local market. Also, some positions may include bonuses or other incentives. #LI-US1 #LI-HYBRID Pay Range: $ 60.00 - $ 70.00