Skip to content

IT (Cyberspace) · Work role code 651

Enterprise Architect

Develops and maintains business, systems, and information processes to support enterprise mission needs; develops information technology (IT) rules and requirements that describe baseline and target architectures.

From DoD DCWF Tool v5.3 (2026-09-25)

Tasks

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 413AAnalyze user needs and requirements to plan architecture.Core
  • 483ACaptures and integrates essential system capabilities or business functions required for partial or full system restoration after a catastrophic failure event.Additional
  • 484Define appropriate levels of system availability based on critical system functions and ensure system requirements identify appropriate disaster recovery and continuity of operations requirements to include any appropriate fail-over/alternate site requirements, backup requirements, and material supportability requirements for system recovery/restoration.Additional
  • 502BDevelop enterprise architecture required to meet user needs.Core
  • 569ADocument and update as necessary all definition and architecture activities.Core
  • 579Ensure acquired or developed system(s) and architecture(s) are consistent with organization's cybersecurity architecture guidelines.Core
  • 602Evaluate factors such as reporting formats required, cost constraints, and need for security restrictions to determine hardware configuration.Additional
  • 631Identify and prioritize critical business functions in collaboration with organizational stakeholders.Additional
  • 765AIntegrate results regarding the identification of gaps in security architecture.Additional
  • 780APlan implementation strategy to ensure enterprise components can be integrated and aligned.Core
  • 797Provide advice on project costs, design concepts, or design changes.Additional
  • 809Provide input to the Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials).Additional
  • 864ATranslate proposed capabilities into technical requirements.Additional
  • 994ADocument how the implementation of a new system or new interface between systems impacts the current and target environment including but not limited to security posture.Additional
  • 996BIntegrate key management functions as related to cyberspace.Additional
  • 1147ADevelop data management capabilities (e.g., cloud based, centralized cryptographic key management) to include support to the mobile workforce.Additional
  • 2014Analyze candidate architectures, allocate security services, and select security mechanisms.Additional
  • 2390Evaluate security architectures and designs to determine the adequacy of security design and architecture proposed or provided in response to requirements contained in acquisition documents.Additional
  • 2887Write detailed functional specifications that document the architecture development process.Additional

Knowledge

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 22* Knowledge of computer networking concepts and protocols, and network security methodologies.Core
  • 34Knowledge of database systems.Additional
  • 38Knowledge of organization's enterprise information security architecture system.Core
  • 40Knowledge of organization's evaluation and validation requirements.Additional
  • 42Knowledge of electrical engineering as applied to computer architecture, including circuit boards, processors, chips, and associated computer hardware.Additional
  • 43AKnowledge of embedded systems.Additional
  • 46AKnowledge of system fault tolerance methodologies.Additional
  • 51Knowledge of how system components are installed, integrated, and optimized.Additional
  • 53AKnowledge of risk assessments and authorization per Risk Management Framework processes.Additional
  • 62Knowledge of industry-standard and organizationally accepted analysis principles and methods.Additional
  • 63Knowledge of cybersecurity principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).Additional
  • 65AKnowledge of Information Theory (e.g., source coding, channel coding, algorithm complexity theory, and data compression).Additional
  • 69AKnowledge of risk management processes and requirements per the Risk Management Framework (RMF).Additional
  • 70AKnowledge of cybersecurity methods, such as firewalls, demilitarized zones, and encryption.Additional
  • 79Knowledge of network access, identity, and access management (e.g., public key infrastructure [PKI]).Core
  • 81AKnowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services.Additional
  • 82AKnowledge of network design processes, to include understanding of security objectives, operational objectives, and tradeoffs.Core
  • 90Knowledge of operating systems.Additional
  • 92Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol [TCP] and Internet Protocol [IP], Open System Interconnection Model [OSI], Information Technology Infrastructure Library, current version [ITIL]).Additional
  • 94Knowledge of parallel and distributed computing concepts.Additional
  • 108* Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).Core
  • 108AKnowledge of the DoD implementation of the Risk Management Framework (RMF) to include processes.Additional
  • 109AKnowledge of configuration management techniques.Additional
  • 110Knowledge of key concepts in security management (e.g., Release Management, Patch Management).Additional
  • 111Knowledge of security system design tools, methods, and techniques.Additional
  • 113AKnowledge of N-tiered topologies including server and client operating systems.Additional
  • 119Knowledge of software engineering.Additional
  • 130Knowledge of systems testing and evaluation methods.Additional
  • 133Knowledge of key telecommunications concepts (e.g., Routing Algorithms, Fiber Optics Systems Link Budgeting, Add/Drop Multiplexers).Additional
  • 141AKnowledge of the enterprise information technology (IT) architectural concepts and patterns to include baseline and target architectures.Core
  • 143AKnowledge of integrating the organization’s goals and objectives into the architecture.Core
  • 144Knowledge of the systems engineering process.Core
  • 183AKnowledge in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.Additional
  • 1037BKnowledge of program protection planning to include information technology (IT) supply chain security/risk management policies, anti-tampering techniques, and requirements.Additional
  • 1038BKnowledge of local specialized system requirements (e.g., critical infrastructure/control systems that may not use standard information technology [IT]) for safety, performance, and reliability.Additional
  • 1072Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth, Zero Trust).Core
  • 1073Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.Additional
  • 1130Knowledge of organizational process improvement concepts and process maturity models (e.g., Capability Maturity Model Integration (CMMI) for Development, CMMI for Services, and CMMI for Acquisitions).Additional
  • 1133Knowledge of service management concepts for networks and related standards (e.g., Information Technology Infrastructure Library, current version [ITIL]).Additional
  • 1136AKnowledge of use cases related to collaboration and content synchronization across platforms (e.g., Mobile, PC, Cloud).Additional
  • 1141AKnowledge of an organization's information classification program and procedures for information compromise.Additional
  • 1142Knowledge of security models (e.g., Bell-LaPadula model, Biba integrity model, Clark-Wilson integrity model).Additional
  • 1157* Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity.Core
  • 1158* Knowledge of cybersecurity principles.Core
  • 1159* Knowledge of cyber threats and vulnerabilities.Core
  • 3153Knowledge of circuit analysis.Additional
  • 3246Knowledge of confidentiality, integrity, and availability requirements.Additional
  • 3307Knowledge of cybersecurity-enabled software products.Additional
  • 3642Knowledge of various types of computer architectures.Additional
  • 6330Knowledge of multi-level/security cross domain solutions.Additional
  • 6900* Knowledge of specific operational impacts of cybersecurity lapses.Core
  • 6935* Knowledge of cloud computing service models Software as Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS).Core
  • 6938* Knowledge of cloud computing deployment models in private, public, and hybrid environment and the difference between on-premises and off-premises environments.Core
  • 7111* Knowledge of Zero Trust Security Model Principles.Core

Skills

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 155Skill in applying and incorporating information technologies into proposed solutions.Additional
  • 180Skill in designing the integration of hardware and software solutions.Additional
  • 183Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.Additional
  • 224Skill in design modeling and building use cases (e.g., unified modeling language).Additional
  • 6680Skill in the use of design methods.Additional
  • 6942Skill in designing or implementing cloud computing deployment models.Additional
  • 6945Skill in migrating workloads to, from, and among the different cloud computing service models.Additional

Abilities

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 68AAbility to build architectures and frameworks.Core
  • 132AAbility to execute technology integration processes.Additional
  • 993AAbility to apply the methods, standards, and approaches for describing, analyzing, and documenting an organization's enterprise information technology (IT) architecture (e.g., Open Group Architecture Framework [TOGAF], Department of Defense Architecture Framework [DoDAF], Federal Enterprise Architecture Framework [FEAF]).Additional
  • 6030Ability to apply an organization's goals and objectives to develop and maintain architecture.Additional
  • 6150Ability to optimize systems to meet enterprise performance requirements.Additional
  • 6918Ability to apply cybersecurity strategy to cloud computing service and deployment models, identifying proper architecture for different operating environments.Additional

Workforce Automation analysis, not part of the source

O*NET jobs

WFA · Part of the paid plan when accounts open

Jobs the ETO-CSET NICE/O*NET crosswalk (2024) maps to this role’s NICE equivalents, with the share of each job’s detailed work activities (DWAs) that has a mapped AI skill.

Equivalents

NICE work roles

From DoD DCWF Tool v5.3 (2026-09-25), linked from published ids only, never from titles

Free · DoD DCWF Tool v5.3 (2026-09-25)

O*NET jobs it reaches

Through its NICE equivalents, by the ETO-CSET NICE/O*NET crosswalk (2024); jobs from O*NET 30.3

Free · O*NET 30.3