* Knowledge of computer networking concepts and protocols, and network security methodologies.

Knowledge of organization’s enterprise information security architecture system.

Ability to build architectures and frameworks.

Knowledge of network access, identity, and access management (e.g., public key infrastructure [PKI]).

Knowledge of network design processes, to include understanding of security objectives, operational objectives, and tradeoffs.

* Knowledge of risk management processes (e.g., methods for assessing and mitigating risk).

Knowledge of the enterprise information technology (IT) architectural concepts and patterns to include baseline and target architectures.

Knowledge of integrating the organization’s goals and objectives into the architecture.

Knowledge of the systems engineering process.

Analyze user needs and requirements to plan architecture.

Document and update as necessary all definition and architecture activities.

Ensure acquired or developed system(s) and architecture(s) are consistent with organization’s cybersecurity architecture guidelines.

Plan implementation strategy to ensure enterprise components can be integrated and aligned.

Knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of defense-in-depth).

* Knowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity.

* Knowledge of cybersecurity principles.

* Knowledge of cyber threats and vulnerabilities.

* Knowledge of specific operational impacts of cybersecurity lapses.

* Knowledge of cloud computing service models Software as a Service (SaaS), Infrastructure as a Service (IaaS), and Platform as a Service (PaaS).

* Knowledge of cloud computing deployment models in private, public, and hybrid environment and the difference between on-premises and off-premises environments.

Knowledge of database systems.

Knowledge of organization’s evaluation and validation requirements.

Knowledge of electrical engineering as applied to computer architecture, including circuit boards, processors, chips, and associated computer hardware.

Knowledge of embedded systems.

Knowledge of system fault tolerance methodologies.

Knowledge of how system components are installed, integrated, and optimized.

Knowledge of security risk assessments and authorization per Risk Management Framework processes.

Knowledge of industry-standard and organizationally accepted analysis principles and methods.

Knowledge of cybersecurity principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).

Knowledge of Information Theory (e.g., source coding, channel coding, algorithm complexity theory, and data compression).

Knowledge of risk management processes and requirements per the Risk Management Framework (RMF).

Knowledge of cybersecurity methods, such as firewalls, demilitarized zones, and encryption.

Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services.

Knowledge of operating systems.

Knowledge of how traffic flows across the network (e.g., Transmission Control Protocol [TCP] and Internet Protocol [IP], Open System Interconnection Model [OSI], Information Technology Infrastructure Library, current version [ITIL]).

Knowledge of parallel and distributed computing concepts.

Knowledge of the DoD implementation of the Risk Management Framework (RMF) to include processes.

Knowledge of configuration management techniques.

Knowledge of key concepts in security management (e.g., Release Management, Patch Management).

Knowledge of security system design tools, methods, and techniques.

Knowledge of N-tiered typologies including server and client operating systems.

Knowledge of software engineering.

Knowledge of systems testing and evaluation methods.

Ability to execute technology integration processes.

Knowledge of key telecommunications concepts (e.g., Routing Algorithms, Fiber Optics Systems Link Budgeting, Add/Drop Multiplexers).

Skill in applying and incorporating information technologies into proposed solutions.

Skill in designing the integration of hardware and software solutions.

Skill in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.

Knowledge in determining how a security system should work (including its resilience and dependability capabilities) and how changes in conditions, operations, or the environment will affect these outcomes.

Skill in design modeling and building use cases (e.g., unified modeling language).

Captures and integrates essential system capabilities or business functions required for partial or full system restoration after a catastrophic failure event.

Define appropriate levels of system availability based on critical system functions and ensure system requirements identify appropriate disaster recovery and continuity of operations requirements to include any appropriate fail-over/alternate site requirements, backup requirements, and material supportability requirements for system recover/restoration.

Develop enterprise architecture required to meet user needs.

Evaluate factors such as reporting formats required, cost constraints, and need for security restrictions to determine hardware configuration.

Identify and prioritize critical business functions in collaboration with organizational stakeholders.

Integrate results regarding the identification of gaps in security architecture.

Provide advice on project costs, design concepts, or design changes.

Provide input to the Risk Management Framework process activities and related documentation (e.g., system life-cycle support plans, concept of operations, operational procedures, and maintenance training materials).

Translate proposed capabilities into technical requirements.

Ability to apply the methods, standards, and approaches for describing, analyzing, and documenting an organization’s enterprise information technology (IT) architecture (e.g., Open Group Architecture Framework [TOGAF], Department of Defense Architecture Framework [DoDAF], Federal Enterprise Architecture Framework [FEAF]).

Document how the implementation of a new system or new interface between systems impacts the current and target environment including but not limited to security posture.

Integrate key management functions as related to cyberspace.

Knowledge of program protection planning to include information technology (IT) supply chain security/risk management policies, anti-tampering techniques, and requirements.

Knowledge of local specialized system requirements (e.g., critical infrastructure/control systems that may not use standard information technology [IT]) for safety, performance, and reliability).

Knowledge of network systems management principles, models, methods (e.g., end-to-end systems performance monitoring), and tools.

Knowledge of organizational process improvement concepts and process maturity models (e.g., Capability Maturity Model Integration (CMMI) for Development, CMMI for Services, and CMMI for Acquisitions).

Knowledge of service management concepts for networks and related standards (e.g., Information Technology Infrastructure Library, current version [ITIL]).

Knowledge of use cases related to collaboration and content synchronization across platforms (e.g., Mobile, PC, Cloud).

Knowledge of an organization’s information classification program and procedures for information compromise.

Knowledge of security models (e.g., Bell-LaPadula model, Biba integrity model, Clark-Wilson integrity model).

Develop data management capabilities (e.g., cloud based, centralized cryptographic key management) to include support to the mobile workforce.

Analyze candidate architectures, allocate security services, and select security mechanisms.

Evaluate security architectures and designs to determine the adequacy of security design and architecture proposed or provided in response to requirements contained in acquisition documents.

Write detailed functional specifications that document the architecture development process.

Knowledge of circuit analysis.

Knowledge of confidentiality, integrity, and availability requirements.

Knowledge of cybersecurity-enabled software products.

Knowledge of various types of computer architectures.

Ability to apply an organization’s goals and objectives to develop and maintain architecture.

Ability to optimize systems to meet enterprise performance requirements.

Knowledge of multi-level/security cross domain solutions.

Skill in the use of design methods.

Ability to apply cybersecurity strategy to cloud computing service and deployment models, identifying proper architecture for different operating environments.

Skill in designing or implementing cloud computing deployment models.

Skill in migrating workloads to, from, and among the different cloud computing service models.