Enterprise Data Management Architect

Requires US Citizenship Yes
Employment Term and Type: Regular, Full Time
Required Security Clearance: (Minimum for hire) Secret with ability to obtain TS/SCI
Required Education:  (Minimum for hire)  Bachelor's Degree in Engineering or engineering discipline; Computer science or IT discipline; Technical discipline
Salary Band: $170,000- $180,000

Job Description:
FGS is seeking an experienced Enterprise Data Management Architect to lead the design, governance, and implementation of enterprise data management strategies supporting complex Department of Defense and Intelligence Community environments.

This position is responsible for developing enterprise data architectures that enable secure discovery, storage, sharing, protection, and lifecycle management of structured and unstructured information across on-premises, hybrid, and cloud environments. The architect will ensure data is appropriately classified, tagged, governed, and made available only to authorized users through modern Identity, Credential, and Access Management (ICAM), Role-Based Access Control (RBAC), and Attribute-Based Access Control (ABAC) technologies.

Working closely with cybersecurity engineers, cloud architects, systems engineers, application developers, and mission stakeholders, the Enterprise Data Management Architect will develop scalable solutions that enable secure information sharing while ensuring compliance with DoD, Intelligence Community, and Federal cybersecurity and data governance standards.

Primary Duties and Responsibilities:

• Design and implement enterprise data management strategies supporting structured, unstructured, and semi-structured data across multiple platforms and security domains.
• Develop enterprise data architectures that organize, classify, catalog, and govern mission data throughout its lifecycle.
• Design metadata, taxonomy, labeling, and tagging strategies to enable automated data discovery, protection, and access control.
• Develop and implement Attribute-Based Access Control (ABAC) models that enforce access decisions based on user clearance, nationality, citizenship, organization, mission assignment, classified program access, and other security attributes.
• Integrate enterprise data repositories with Identity, Credential, and Access Management (ICAM) services to ensure secure authentication, authorization, and auditing.
• Collaborate with cybersecurity, cloud, network, and systems engineering teams to implement Zero Trust data protection strategies.
• Define enterprise data governance policies, data quality standards, retention schedules, and information lifecycle management processes.
• Support implementation of data loss prevention (DLP), digital rights management, encryption, auditing, and continuous monitoring capabilities.
• Develop technical documentation, data models, governance plans, and architecture artifacts supporting RMF and Authority to Operate (ATO) activities.
• Evaluate emerging technologies and provide technical leadership for enterprise data modernization initiatives.

Required Qualifications:

• U.S. Citizenship.
• Active Secret clearance and ability to qualify for and obtain a TS/SCI.
• Bachelor’s degree in computer science, Information Systems, Data Science, Cybersecurity, Engineering, or a related field (or equivalent experience).
• Eight (7)+ years of experience designing enterprise data management, information governance, or data architecture solutions.
• Experience managing diverse data types, including documents, multimedia, structured databases, geospatial information, and large-scale file repositories.
• Experience implementing enterprise metadata management, taxonomy development, data cataloging, and information lifecycle management.
• Working knowledge of Identity and Access Management (IAM), Identity, Credential, and Access Management (ICAM), RBAC, and ABAC principles.
• Experience developing data protection strategies utilizing user attributes such as clearance level, nationality, citizenship, organization, mission assignment, and program access.
• Experience supporting DoD or Intelligence Community environments and familiarity with RMF, NIST cybersecurity guidance, and Zero Trust Architecture.
• Strong analytical, organizational, communication, and documentation skills.

Desired Qualification:

• Active Top Secret or TS/SCI clearance.
• Experience implementing DoD Enterprise ICAM and Zero Trust initiatives.
• Knowledge of DoD Data Strategy and DoD Data Mesh concepts.
• Experience with Microsoft Purview, Collibra, Informatica, Apache Atlas, Talend, or similar enterprise data governance platforms.
• Experience integrating Microsoft Entra ID, Active Directory, SailPoint, Okta, Ping Identity, or other enterprise IAM platforms.
• Familiarity with graph databases, knowledge management, semantic technologies, and enterprise search platforms.
• Experience supporting cloud-native data services in Microsoft Azure, AWS, or Google Cloud.
• Relevant certifications such as CDMP, CISSP, CCSP, TOGAF, DAMA Certified Data Management Professional (CDMP), Azure Data Engineer Associate, AWS Certified Data Analytics, or similar.

Education Requirements: 

• Bachelor’s degree in computer science, Information Systems, Data Science, Cybersecurity, Engineering, or a related field (or equivalent experience).

Security Clearance Requirements: 

• Active Secret clearance and ability to qualify for and obtain a TS/SCI

Physical, Work Environment & Conditions: (please update)

• Typical office environment.
• Must be able to sit or stand at a workstation for extended periods.
• Occasional standing while working in server rooms or at patch panels.
• Must be able to lift and move moderately heavy equipment (e.g., routers, switches, servers) typically up to 30–50 pounds.
• Manual Dexterity required for connecting cables, configuring devices, and handling small tools or components.
• Must be able to view computer screens for long periods.
• Ability to distinguish color-coded documents, cabling, and indicator lights.
• Must be able to climb ladders or crawl in tight spaces for cable runs or equipment installation.
• May require walking between different buildings or workstations.
• Must be able to communicate clearly with technical teams and end-users.
• May need to hear alarms, server beeps, or equipment noises indicating issues

 
This position description is not intended as, nor should it be construed as, exhaustive of all responsibilities, skills, efforts or working conditions associated with this job. This and all positions are eligible for organization-wide transfer. Management reserves the right to assign or reassign duties and responsibilities at any time.
 
Company Overview: FGS, LLC is an international, leading-edge provider of technical services to include Secure Information Systems, Security and Engineering and Intelligence Analysis. Our turn-key solutions include design, engineering, deployment operations, and sustainment of secure technology and critical infrastructure for the protection and safety of our customers' mission-critical information, processes, and personnel. Demonstrating an unyielding commitment to our customers, superior trust and dedication with our partners, and leading-edge technical expertise over the past seven years, FGS has experienced explosive growth providing superior services throughout the world, from North America and the Pacific Rim to the Middle East and Europe.

FGS provides secure, leading-edge technology and process management services to military, government, and commercial clients worldwide.

FGS offers a generous compensation package including health, dental, vision, 401(k), group life insurance, educational reimbursement, among other benefits.

We value our employees and strive to offer many opportunities for professional growth.

#cjpost – Information Security
FGS, LLC is an Equal Opportunity Employer as to all protected groups, including protected veterans and individuals with disabilities