.NET Security Architect

Title: .NET Security Architect

Mode: Full - Time Employment - Hybrid

Location: Columbia, SC (Locals to SC Only)

Duration: 12-18 months (Mid Term)

Notes: Target a Senior .NET Security Architect with extensive hands-on experience in C#/.NET development, penetration testing, full-stack MVC web development, secure database design and administration, Active Directory programming, business continuity, and disaster recovery. Candidates must have 11+ years of experience in each of the specified technical areas, 10+ years of state government experience, and a bachelor's degree in information technology systems, Computer Science, or a related field. Prioritize professionals who combine enterprise application architecture, secure software development, technical documentation, vulnerability analysis and remediation, and experience developing secure applications using C#/.NET 10. Preferred qualifications include PCI/NIST/Pub1075 security implementations or audits, DISA STIG, firewalls, load balancers, Azure DevOps, and at least one penetration testing, Microsoft/Azure, or CompTIA Security+ certification.

What You'll Do / Key Responsibilities

• Analyze project requirements and recommend appropriate technical approaches, tools, and methodologies.
• Design, develop, test, debug, and deploy secure enterprise applications using C#/.NET 10, including web, desktop, and console applications.
• Develop penetration testing tools and systems using C#/.NET 10.
• Develop and maintain enterprise application architecture models, component structures, and architecture frameworks.
• Prepare detailed technical specifications and system design documentation, including workflow models, class diagrams, interaction diagrams, component diagrams, and deployment diagrams.
• Design enterprise applications for highly secured, multi-firewall DISA STIG environments.
• Develop automated just-in-time provisioning (JITP) solutions for user onboarding and offboarding.
• Implement application hardening and data protection for secure server deployments.
• Use open-source and enterprise penetration testing tools to test complete systems and produce fully documented penetration testing reports.
• Conduct application testing and debugging before production deployment and provide support during user acceptance testing (UAT).
• Provide technical guidance and mentoring for vulnerability analysis and remediation.
• Review software development life cycle phases to verify compliance with applicable web application development standards.
• Collaborate with network administration, database administration, and technical support teams to ensure cohesive system design and resolve technology issues.
• Support secure database design and administration, Active Directory programming, business continuity, and disaster recovery activities.
• Produce deployment documentation, support procedures, progress reports, and technical updates for management and business stakeholders.
• Support server infrastructure stability through monitoring, maintenance, troubleshooting, optimization, and equipment and software upgrades.
• Communicate effectively with technical professionals and stakeholders, manage multiple priorities, respond to support tickets, and contribute to process improvements.
• Follow information security guidelines and perform other related duties and special projects as assigned.

Required Qualifications

• 11+ years of experience with C# and .NET development.
• 11+ years of experience with penetration testing.
• 10+ years of experience with the state government.
• 11+ years of experience with full-stack MVC web development.
• 11+ years of experience with secure database design and administration.
• 11+ years of experience with Active Directory programming.
• 11+ years of experience with business continuity and disaster recovery.
• Bachelor's degree in information technology systems, Computer Science, or a related field.

Preferred Qualifications

• Experience with projects involving PCI, NIST, and/or Pub1075 security implementations or audits.
• Experience with projects involving DISA STIG.
• Experience with firewalls and load balancers.
• Experience with vulnerability remediation.
• Experience with Azure DevOps.
• At least one of the following certifications:
• Penetration testing certification
• Microsoft/Azure certification
• CompTIA Security+

Additional Skills

• Strong verbal and written communication skills.
• Ability to work effectively in a team development environment.
• Technical documentation and system architecture skills.
• Ability to communicate with technical teams, management, and business stakeholders.
• Strong analytical, organizational, and problem-solving skills.
• Ability to manage multiple tasks, prioritize issues, provide timely status updates, and contribute to continuous process improvement.

Pre-Employment Checks

• Employment is subject to the applicable checks specified for the engagement, including:
• Nationwide criminal history checks covering federal, state, and county records for jurisdictions where the candidate has resided during the preceding seven years, including applicable countries where relevant.
• Credit history check.
• E-Verify employment verification in accordance with the applicable FAR E-Verify requirements.
• South Carolina tax history review, with contractors required to be current on tax filings and payments.