You Are:

The Technical Lead / Enterprise Architect oversees the end-to-end technical architecture for the cyber platform. This role spans two phases-(1) Readiness & Planning (Phase 0) and (2) Platform Implementation-and is accountable for defining the target architecture, standards, and guardrails; directing technical decisions; and ensuring secure, scalable delivery across ~17 sites in both Unclassified and Classified environments.

The Architect works closely with senior project leadership, CIO/CISO stakeholders, site authorities, and cross-functional delivery teams to design, implement, and transition a modernized RMF operating model and consolidated eGRC platform. The role requires expertise in enterprise-scale federal architectures, RMF governance, multi-site interoperability, zero-trust security design, cloud-native modernization, and complex technical orchestration across distributed environments.

The Work:

Phase 0 - eGRC Readiness & Planning

Platform Selection & Analysis of Alternatives (AoA)

• Lead structured RFI/RFP processes, vendor demonstrations, and hands-on proof-of-concepts.
• Develop scoring rubrics (capabilities, fit/gap, integration complexity, security posture, TCO, operating model fit).
• Deliver defensible recommendations aligned to NNSA mission objectives.
• Coordinate decision logs, trade-off analyses, and implementation dependencies with PMO and executive governance.

Program Governance & Architecture Leadership

• Establish technical governance: architecture review cadence, decision authority, design standards, waiver processes, escalation paths.
• Define and publish enterprise architecture (EA) blueprint covering services, data domains, integrations, security controls, environments, deployment patterns.

Enterprise Discovery & Architecture Assessment

• Lead structured discovery across independent Lab/Plant/Site ecosystems with distinct CIO/CISO authority, authorization boundaries, policies, badging, data taxonomies, legacy implementations, and RMF maturity
• Develop site-specific architecture profiles, complexity scoring, readiness plans, and synthesize a consolidation/optimization strategy.

Target State Design & Standards

• Define reference architectures (platform, data, integration, security, operations).
• Develop reusable patterns (workflow orchestration, control inheritance, reporting).
• Build metrics/KPI/SLO frameworks and architect telemetry for near-real-time compliance and risk visibility.
• Sequence multi-site deployments, develop regional wave plans, and define "transition war room" operating model.

Security Architecture & Compliance

• Architect Zero Trust aligned with NIST guidance for multi-location, cloud-native applications.
• Define control families, inheritance models, continuous authorization practices, and DevSecOps-embedded security.
• Specify cryptographic standards (FIPS), logging/auditing, boundary protections (WAF/IDS/IPS), data-in-transit/at-rest protections, endpoint/EDR requirements, IPv6, and trusted connectivity.

Operational Readiness Architecture

• Design service desk and support architecture (Tier 0-3), KM frameworks, runbooks, SRE practices, observability stack, IR playbooks, and cost/FinOps guardrails.

Implementation - System Build, Migration & Cutover

Platform Architecture & Configuration

• Lead platform instantiation and hardened configuration in government-managed cloud environments.
• Enforce secure-by-default baselines, IaC/CaC pipelines, and policy-as-code.
• Define and validate standardized workflows, automation, control libraries, RBAC configurations; govern non-standard variances.

Data Architecture & Migration

• Own migration architecture including source inventory, mapping, lineage, quality thresholds, reconciliation, and cutover sequencing.
• Establish master data/taxonomy standards and data services enabling near-real-time analytics and compliance reporting.

Integration & Interoperability

• Architect secure integrations with identity/federation services, ITSM/ticketing, SIEM/SOAR, vulnerability/scanning tools, document repositories, messaging systems.
• Ensure least-privilege, auditable, and resilient integration flows.

Observability, Reporting & FinOps

• Implement telemetry, log aggregation, health dashboards across application, platform, and network layers.
• Define alerts and SLOs tied to operational KPIs and compliance metrics.
• Integrate FinOps practices for consumption tracking, capacity optimization, and cost governance.

Enablement & Adoption

• Co-develop hands-on, lab-based technical training for architects, engineers, site admins, and functional users (~17 sites).
• Implement feedback loops for continuous improvement.

Quality Assurance, Security Validation & Transition

• Direct architecture reviews, threat modeling, secure configuration validation, UAT, performance testing, compliance verification.
• Manage defect triage.
• Author Transition to Operations architecture and formally accept systems into steady state.

Here's What You Need:

Skills:

• Leadership designing/delivering enterprise-scale architectures across complex multi-site federal environments (Unclassified + Classified).
• Expertise in enterprise cyber platforms (Wraithwatch, Xacta, RegScale), RMF operations, control inheritance, compliance reporting.
• Deep hands-on experience with cloud (GovCloud/FedRAMP), DevSecOps, IaC/CaC, CI/CD, container orchestration, automation frameworks.
• Strong security engineering across Zero Trust, identity/federation, encryption, logging/auditing, EDR, vulnerability management, boundary protections.
• Ability to convey complex technical concepts to executives and non-technical audiences.
• Strong analytical decision-making, documentation discipline, and standards management.

Required Qualifications

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Data/Analytics, or related field (advanced degree preferred).
• 10+ years in architecture/engineering roles, including 5+ years leading large-scale IT implementations and platform consolidations.
• 5+ years implementing or architecting enterprise cyber platforms supporting RMF/FISMA/NIST 800-53 (eGRC preferred but not required)
• Demonstrated experience across Unclassified and Classified environments, multi-site deployments, and complex data migrations
• Hands-on experience with GovCloud/FedRAMP, Zero Trust, DevSecOps, CI/CD, IaC/CaC, cloud security services
• Ability to obtain and maintain a Top Secret/Q clearance (not required at application).
• US Citizenship

As required by local law, Accenture Federal Services provides reasonable ranges of compensation for hired roles based on labor costs in the states of California, Colorado, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New York, Vermont, Virginia, Washington, and the District of Columbia, and the city of Cleveland. The base pay range for this position in these locations is shown below. Compensation for roles at Accenture Federal Services varies depending on a wide array of factors, including but not limited to office location, role, skill set, and level of experience. Accenture Federal Services offers a wide variety of benefits. You can find more information on benefits here. We accept applications on an on-going basis and there is no fixed deadline to apply.

The pay range for the states of California, Colorado, Hawaii, Illinois, Maine, Maryland, Massachusetts, Minnesota, New Jersey, New York, Vermont, Virginia, Washington, and the District of Columbia, and the city of Cleveland is:

$148,800-$306,500 USD