Security Architect Analyst

Overview

Systems Planning and Analysis, Inc. (SPA) delivers high-impact, technical solutions to complex national security issues. With over 50 years of business expertise and consistent growth, we are known for continuous innovation for our government customers, in both the US and abroad. Our exceptionally talented team is highly collaborative in spirit and practice, producing Results that Matter. Come work with the best! We offer opportunity, unique challenges, and clear-sighted commitment to the mission. SPA: Objective. Responsive. Trusted.  

The Joint, Office of the Secretary of Defense, Interagency Division provides expert support services to a range of customers spanning across the Department of Defense, Federal Civilian, and international markets. JOID provides a diverse portfolio of analytical and programmatic capabilities to help our customers make informed decisions on their most challenging issues.

SPA's NATO Allied Command Transformation Group within JOID provides capability development, portfolio management, program management, quality management, cost estimation analysis, standardization, reporting, software solutions and information management, and capability management support. We also provide an improved capability requirements capture process, including the generation, documentation and tracing of user requirements, with appropriate technical scrutiny, over the entire lifecycle of the requirements from capability definition through capability realization and capability usage. 

We have an immediate need for a Security Architecture Analyst to provide onsite support out of Norfolk, VA.

Responsibilities

The candidate will support NATO’s Core Services (CS) Program within the Capability Development (CAP) CIS Core Services team, contributing to the development of NATO’s Digital Backbone and Digital Transformation initiatives. Will provide specialized security expertise to ensure timely security accreditation and alignment with NATO Enterprise Architecture, Security Architecture, and applicable security directives, policies, and guidelines. Responsibilities include developing and coordinating security aspects of Capability Development Plans (CDPs), Common Funded Capability Development Governance Model (CFCDGM) management products, and key program documentation, including Operational Requirements Statements (ORS), Capability Requirements Briefs (CRBs), and Capability Program Plans (CPPs). Develop high-level security architectures, business models, operational use cases, and security requirements across Core Services, Core Communications, Deployable CIS, and Cyber capability areas. Serve as a key security advisor to Capability Development Program Directors, ensuring effective coordination with NATO security accreditation authorities, operational stakeholders, Host Nations, and other SMEs. Responsibilities include assessing security implications for program cost, scope, schedule, risk, and performance; analyzing security policies and directives to ensure coherence across related programs; and supporting the integration of national security solutions with NATO capabilities. Provide security advice across CIS, Cyber, Information Management, Infrastructure, and Services communities, while supporting engagement with the NATO Office of Security (NOS), NATO Security Accreditation Board (NSAB), NATO Headquarters coordination groups, member nations, industry, academia, and other relevant organizations. Periodic travel to Europe, approximately quarterly, will be required to support security coordination and accreditation activities.

Support security requirements identification, validation, and solution development; participate in technical discussions, coordination meetings, and workshops; and prepare supporting documentation, briefings, presentations, and meeting records. Responsibilities also include collecting, analyzing, and maintaining program information within NATO knowledge management systems, including the PfMO iHub, SharePoint, and Electronic Data Management System (EDMS). Provide weekly reports summarizing security reviews, analyses, identified issues, and recommended actions, along with additional documentation and presentations as directed by the Core Services Program Director.

Qualifications

Required:

• Bachelor's degree with 2+ years of relevant professional experience; or higher secondary education with completed advanced vocational training leading to a professional qualification or accreditation and 4+ years of relevant professional experience.
• Demonstrated experience managing security aspects of CIS/ICT program and projects, including the development and implementation of business processes within established cost, schedule, resource, and quality parameters.
• Experience planning, coordinating, and executing security activities within complex, strategically significant program and projects, including stakeholder engagement, risk management, resource allocation, and performance monitoring.
• Demonstrated practical experience in the security design and/or implementation of CIS/ICT solutions, including architectural approaches supporting organizational and business transformation.
• Experience identifying, assessing, and mitigating security risks, developing security inputs to program plans, and ensuring compliance with established security requirements.
• Certified Information Systems Auditor (CISA) or Certified Information Security Manager (CISM) certification awarded by ISACA, or an equivalent NATO-recognized qualification, including national military equivalents.
• Demonstrated knowledge of information technology security solutions, change management, and security considerations associated with Digital Transformation initiatives.
• Experience coordinating security activities across multidisciplinary teams, managing stakeholder relationships, and supporting program or project delivery throughout the lifecycle.
• Active NATO or NATO National Secret clearance.
• Able to work fully onsite based on client needs.

Desired:

• Demonstrated program or project management experience; Managing Successful Programs (MSP) or PRINCE2 certification.
• Previous experience working within NATO at the strategic level.
• Experience supporting NATO Communications and Information Systems (CIS) programs, projects, or capabilities.
• Broad knowledge of CIS capabilities, emerging technologies, and innovation initiatives.
• Experience working with military or public-sector organizations at the strategic level.
• Master's degree in a relevant discipline.

Pay Range Information

At SPA, we strive to deliver a robust total compensation package that will attract and retain top talent. Elements of the compensation package include competitive base pay and variable compensation opportunities. SPA provides eligible employees with an opportunity to enroll in a variety of benefit programs, generally including health insurance, flexible spending accounts, health savings accounts, retirement savings plans, life and disability insurance programs, and a number of programs that provide for both paid and unpaid time away from work. The specific programs and options available to any given employee may vary depending on eligibility factors such as geographic location, date of hire, etc. Please note that the salary information shown below is a general guideline only. Salaries are commensurate with experience and qualifications, as well as market and business considerations. Virginia, Pay Transparency Salary range: USD $120,000.00/Yr. - USD $160,000.00/Yr.