Skip to content

Cybersecurity · Work role code 652

Security Architect

Designs enterprise and systems security throughout the development lifecycle; translates technology and environmental conditions (e.g., law and regulation) into security designs and processes.

From DoD DCWF Tool v5.3 (2026-09-25)

Tasks

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 413AAnalyze user needs and requirements to plan architecture.Additional
  • 465Develop threat model based on customer interviews and requirements.Additional
  • 483Define and prioritize essential system capabilities or business functions required for partial or full system restoration after a catastrophic failure event.Additional
  • 484Define appropriate levels of system availability based on critical system functions and ensure system requirements identify appropriate disaster recovery and continuity of operations requirements to include any appropriate fail-over/alternate site requirements, backup requirements, and material supportability requirements for system recovery/restoration.Additional
  • 502ADevelop enterprise architecture or system components required to meet user needs.Additional
  • 525ADevelop procedures and test fail-over for system operations transfer to an alternate site based on system availability requirements.Additional
  • 534Develop/integrate cybersecurity designs for systems and networks with multilevel security requirements or requirements for the processing of multiple classification levels of data primarily applicable to government organizations (e.g., UNCLASSIFIED, SECRET, and TOP SECRET).Core
  • 561Document and address organization's information security, cybersecurity architecture, and systems security engineering requirements throughout the acquisition lifecycle.Core
  • 568Employ secure configuration management processes.Core
  • 569ADocument and update as necessary all definition and architecture activities.Additional
  • 579Ensure acquired or developed system(s) and architecture(s) are consistent with organization's cybersecurity architecture guidelines.Core
  • 602Evaluate factors such as reporting formats required, cost constraints, and need for security restrictions to determine hardware configuration.Additional
  • 631Identify and prioritize critical business functions in collaboration with organizational stakeholders.Core
  • 646ADocument the protection needs (i.e., security controls) for the information system(s) and network(s) and document appropriately.Core
  • 669Integrate and align information security and/or cybersecurity policies to ensure system analysis meets security requirements.Additional
  • 765Perform security reviews, identify gaps in security architecture, and develop a security risk management plan.Core
  • 797Provide advice on project costs, design concepts, or design changes.Additional
  • 807Provide input on security requirements to be included in statements of work and other appropriate procurement documents.Additional
  • 809Provide input to the Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials).Additional
  • 864ATranslate proposed capabilities into technical requirements.Additional
  • 865Translate security requirements into application design elements including documenting the elements of the software attack surfaces, conducting threat modeling, and defining any specific security criteria.Additional
  • 936Develop security compliance processes and/or audits for external services (e.g., cloud service providers, data centers).Additional
  • 994Define and document how the implementation of a new system or new interfaces between systems impacts the security posture of the current environment.Core
  • 996AAssess and design security management functions as related to cyberspace.Additional
  • 1147ADevelop data management capabilities (e.g., cloud based, centralized cryptographic key management) to include support to the mobile workforce.Additional
  • 2014Analyze candidate architectures, allocate security services, and select security mechanisms.Additional
  • 2248Develop a system security context, a preliminary system security CONOPS, and define baseline system security requirements in accordance with applicable cybersecurity requirements.Core
  • 2390Evaluate security architectures and designs to determine the adequacy of security design and architecture proposed or provided in response to requirements contained in acquisition documents.Core
  • 2887Write detailed functional specifications that document the architecture development process.Additional

Knowledge

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 8Knowledge of authentication, authorization, and access control methods.Additional
  • 21Knowledge of computer algorithms.Additional
  • 22* Knowledge of computer networking concepts and protocols, and network security methodologies.Core
  • 25Knowledge of encryption algorithms (e.g., Internet Protocol Security [IPSEC], Advanced Encryption Standard [AES], Generic Routing Encapsulation [GRE], Internet Key Exchange [IKE], Message Digest Algorithm [MD5], Secure Hash Algorithm [SHA], Triple Data Encryption Standard [3DES]).Additional
  • 27Knowledge of cryptography and cryptographic key management concepts.Additional
  • 34Knowledge of database systems.Additional
  • 38Knowledge of organization's enterprise information security architecture system.Core
  • 40AKnowledge of organization's evaluation and validation criteria.Additional
  • 42Knowledge of electrical engineering as applied to computer architecture, including circuit boards, processors, chips, and associated computer hardware.Additional
  • 43AKnowledge of embedded systems.Additional
  • 46AKnowledge of system fault tolerance methodologies.Additional
  • 51Knowledge of how system components are installed, integrated, and optimized.Additional
  • 52Knowledge of human-computer interaction principles.Additional
  • 53AKnowledge of risk assessments and authorization per Risk Management Framework processes.Additional
  • 62Knowledge of industry-standard and organizationally accepted analysis principles and methods.Additional
  • 63Knowledge of cybersecurity principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).Core
  • 65AKnowledge of Information Theory (e.g., source coding, channel coding, algorithm complexity theory, and data compression).Additional
  • 69AKnowledge of risk management processes and requirements per the Risk Management Framework (RMF).Additional
  • 75Knowledge of mathematics, including logarithms, trigonometry, linear algebra, calculus, and statistics.Additional
  • 78Knowledge of microprocessors.Additional
  • 79Knowledge of network access, identity, and access management (e.g., public key infrastructure [PKI]).Additional
  • 81AKnowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services.Additional
  • 82AKnowledge of network design processes, to include understanding of security objectives, operational objectives, and tradeoffs.Additional
  • 90Knowledge of operating systems.Additional
  • 92Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol [TCP] and Internet Protocol [IP], Open System Interconnection Model [OSI], Information Technology Infrastructure Library, current version [ITIL]).Additional
  • 94Knowledge of parallel and distributed computing concepts.Additional
  • 108* Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).Core
  • 109AKnowledge of configuration management techniques.Additional
  • 110Knowledge of key concepts in security management (e.g., Release Management, Patch Management).Additional
  • 113AKnowledge of N-tiered topologies including server and client operating systems.Additional
  • 119Knowledge of software engineering.Additional
  • 130Knowledge of systems testing and evaluation methods.Additional
  • 132Knowledge of technology integration processes.Additional
  • 133Knowledge of key telecommunications concepts (e.g., Routing Algorithms, Fiber Optics Systems Link Budgeting, Add/Drop Multiplexers).Additional
  • 141AKnowledge of the enterprise information technology (IT) architectural concepts and patterns to include baseline and target architectures.Additional
  • 143AKnowledge of integrating the organization’s goals and objectives into the architecture.Core
  • 144Knowledge of the systems engineering process.Additional
  • 1034AKnowledge of Personally Identifiable Information (PII) data security standards.Additional
  • 1034BKnowledge of Payment Card Industry (PCI) data security standards.Additional
  • 1034CKnowledge of Personal Health Information (PHI) data security standards.Additional
  • 1037BKnowledge of program protection planning to include information technology (IT) supply chain security/risk management policies, anti-tampering techniques, and requirements.Additional
  • 1038BKnowledge of local specialized system requirements (e.g., critical infrastructure/control systems that may not use standard information technology [IT]) for safety, performance, and reliability.Additional
  • 1073Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.Additional
  • 1125Knowledge of Cloud-based knowledge management technologies and concepts related to security, governance, procurement, and administration.Additional
  • 1130Knowledge of organizational process improvement concepts and process maturity models (e.g., Capability Maturity Model Integration (CMMI) for Development, CMMI for Services, and CMMI for Acquisitions).Additional
  • 1133Knowledge of service management concepts for networks and related standards (e.g., Information Technology Infrastructure Library, current version [ITIL]).Additional
  • 1135Knowledge of the application firewall concepts and functions (e.g., Single point of authentication/audit/policy enforcement, message scanning for malicious content, data anonymization for PCI and PII compliance, data loss protection scanning, accelerated cryptographic operations, SSL security, REST/JSON processing).Additional
  • 1136AKnowledge of use cases related to collaboration and content synchronization across platforms (e.g., Mobile, PC, Cloud).Additional
  • 1141AKnowledge of an organization's information classification program and procedures for information compromise.Additional
  • 1157* Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity.Core
  • 1158* Knowledge of cybersecurity principles.Core
  • 1159* Knowledge of cyber threats and vulnerabilities.Core
  • 3153Knowledge of circuit analysis.Additional
  • 3246Knowledge of confidentiality, integrity, and availability requirements.Additional
  • 3307Knowledge of cybersecurity-enabled software products.Core
  • 3642Knowledge of various types of computer architectures.Additional
  • 6210Knowledge of cloud service models and possible limitations for an incident response.Additional
  • 6330Knowledge of multi-level/security cross domain solutions.Additional
  • 6900* Knowledge of specific operational impacts of cybersecurity lapses.Core
  • 6935* Knowledge of cloud computing service models Software as Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS).Core
  • 6938* Knowledge of cloud computing deployment models in private, public, and hybrid environment and the difference between on-premises and off-premises environments.Core
  • 7111* Knowledge of Zero Trust Security Model Principles.Core

Skills

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 70BSkill in applying cybersecurity methods, such as firewalls, demilitarized zones, and encryption.Core
  • 155Skill in applying and incorporating information technologies into proposed solutions.Additional
  • 180Skill in designing the integration of hardware and software solutions.Additional
  • 183Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.Core
  • 197ASkill in translating operational requirements into protection needs (i.e., security controls).Core
  • 224Skill in design modeling and building use cases (e.g., unified modeling language).Additional
  • 238ASkill in writing code in a currently supported programming language (e.g., Java, C++).Additional
  • 1140ASkill in using Public-Key Infrastructure (PKI) encryption and digital signature capabilities into applications (e.g., S/MIME email, SSL traffic).Additional
  • 1142BSkill in applying security models (e.g., Bell-LaPadula model, Biba integrity model, Clark-Wilson integrity model).Additional
  • 6640Skill in designing multi-level security/cross domain solutions.Additional
  • 6680Skill in the use of design methods.Additional
  • 6942Skill in designing or implementing cloud computing deployment models.Additional
  • 6945Skill in migrating workloads to, from, and among the different cloud computing service models.Additional

Abilities

From DoD DCWF Tool v5.3 (2026-09-25), in the tool's order, with the DCWF KSAT id

Free · DoD DCWF Tool v5.3 (2026-09-25)
  • 68BAbility to design architectures and frameworks.Core
  • 111AAbility to apply secure system design tools, methods and techniques.Additional
  • 124AAbility to apply system design tools, methods, and techniques, including automated systems analysis and design tools.Additional
  • 993AAbility to apply the methods, standards, and approaches for describing, analyzing, and documenting an organization's enterprise information technology (IT) architecture (e.g., Open Group Architecture Framework [TOGAF], Department of Defense Architecture Framework [DoDAF], Federal Enterprise Architecture Framework [FEAF]).Additional
  • 1072AAbility to apply network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).Core
  • 6030Ability to apply an organization's goals and objectives to develop and maintain architecture.Core
  • 6150Ability to optimize systems to meet enterprise performance requirements.Additional
  • 6918Ability to apply cybersecurity strategy to cloud computing service and deployment models, identifying proper architecture for different operating environments.Additional
  • 6919Ability to determine the best cloud deployment model for the appropriate operating environment.Additional

Workforce Automation analysis, not part of the source

O*NET jobs

WFA · Part of the paid plan when accounts open

Jobs the ETO-CSET NICE/O*NET crosswalk (2024) maps to this role’s NICE equivalents, with the share of each job’s detailed work activities (DWAs) that has a mapped AI skill.

Equivalents

NICE work roles

From DoD DCWF Tool v5.3 (2026-09-25), linked from published ids only, never from titles

Free · DoD DCWF Tool v5.3 (2026-09-25)

O*NET jobs it reaches

Through its NICE equivalents, by the ETO-CSET NICE/O*NET crosswalk (2024); jobs from O*NET 30.3

Free · O*NET 30.3