Security Architect

We are seeking a hands-on, senior-level Security Engineer/Architect Consultant to join the Division of Information Security (DIS) at the South Carolina Department of Administration. This contract role focuses on developing enterprise cybersecurity automations, building custom security tools, integrating IAM/SOAR platforms, managing Linux security sensors/collectors, and supporting the 24x7 Security Operations Center (SOC).

Client: State of South Carolina – Department of Administration (Division of Information Security)

Location: 1201 Main Street, Suite 600, Columbia, SC 29201

Work Arrangement: 100% Fully Remote (Nationwide within contiguous US; local South Carolina candidates preferred for occasional hardware assistance)

Role Type: 12-Month Contract (10/19/2026 – 10/19/2027, with extension potential)

Interview Process: 1 Round (Virtual or On-site for local resources)

On-Call / Shift: Core hours 8:30 AM – 5:00 PM EST; includes monthly on-call rotation for SOC support and after-hours maintenance.

Mandatory Screening Requirements

Non-negotiable conditions enforced during initial hiring and ongoing engagement:

• 7-Year Standard Background Check
• Credit History Check (Full credit check during initial hiring process)
• Motor Vehicle Record (MVR) / Driving Record Check
• E-Verify Verification
• SLED (South Carolina Law Enforcement Division) Check
• Annual CJIS Certification: Candidate must obtain and retain annual CJIS certification upon onboarding.

Key Responsibilities

• Security Automation & Tooling: Design, build, deploy, and support Python-based automations, internal web applications, REST APIs, SDKs, CLI tools, and automated incident response workflows (alert enrichment, triage, containment, escalation, and reporting).
• Vulnerability & CVE Integration: Develop custom tools for CVE vetting, vulnerability enrichment, prioritization tracking, and security decision support.
• Linux Platform Administration: Deploy, patch, configure, optimize, and troubleshoot Linux-based OS environments hosting security sensors, log collectors, Docker containers, and data-processing pipelines.
• Enterprise Security Platform Management: Provide secondary operational engineering support for DSPM, ASM, IAM, SIEM, SOAR, XDR, email security, endpoint protection, and network security tools (e.g., Palo Alto Networks, Proofpoint, Tenable, Cribl, WhatsUp Gold).
• Identity & Access Management (IAM): Manage user provisioning/deprovisioning workflows, RBAC, service accounts, API credentials, and identity-based system integrations.
• SOC & Analyst Enablement: Create playbooks, runbooks, and documentation; provide technical escalation support to 24x7 SOC analysts and incident responders.

Required Qualifications & Technical Depth

• Education / Experience: Bachelor's degree in IT, Computer Science, Software Engineering, or Information Security OR 8+ years of equivalent relevant work experience.
• Core Technical Experience: 5+ years of experience supporting large IT environments, security deployments, software development, and systems administration.
• Scripting & Automation Engineering: Demonstrated experience building response workflows and API integrations using Python, PowerShell, Bash, REST APIs, JSON, YAML, and Vendor SDKs.
• Linux Systems Mastery: Hands-on Linux administration, deployment, patching, service management, containerization (Docker), and sensor maintenance.
• Enterprise Security Architecture: In-depth knowledge of incident response, networking, access control, DNS security (e.g., Cisco Umbrella/Secure Access concepts), rate limiting/API throttling, and data ingestion workflows.

Preferred Skills & Certifications

• Certifications: CISSP, Security+, GIAC (GSECIAIH), or specialized Linux/Python/Cloud/IAM certifications.
• Environment Experience: Hands-on generalist experience supporting multi-tenant, shared-services, or managed-service enterprise environments.
• Tooling Knowledge: Experience with Palo Alto Networks, Proofpoint, Tenable, Cribl, WhatsUp Gold, or equivalent enterprise security platforms.