Title: .NET Security Architect
Mode: Full - Time Employment - Hybrid
Location: Columbia, SC (Locals to SC Only)
Duration: 12-18 months (Mid Term)
Notes: Target a Senior .NET Security Architect with extensive hands-on experience in C#/.NET development, penetration testing, full-stack MVC web development, secure database design and administration, Active Directory programming, business continuity, and disaster recovery. Candidates must have 11+ years of experience in each of the specified technical areas, 10+ years of state government experience, and a bachelor's degree in information technology systems, Computer Science, or a related field. Prioritize professionals who combine enterprise application architecture, secure software development, technical documentation, vulnerability analysis and remediation, and experience developing secure applications using C#/.NET 10. Preferred qualifications include PCI/NIST/Pub1075 security implementations or audits, DISA STIG, firewalls, load balancers, Azure DevOps, and at least one penetration testing, Microsoft/Azure, or CompTIA Security+ certification.
What You'll Do / Key Responsibilities
- Analyze project requirements and recommend appropriate technical approaches, tools, and methodologies.
- Design, develop, test, debug, and deploy secure enterprise applications using C#/.NET 10, including web, desktop, and console applications.
- Develop penetration testing tools and systems using C#/.NET 10.
- Develop and maintain enterprise application architecture models, component structures, and architecture frameworks.
- Prepare detailed technical specifications and system design documentation, including workflow models, class diagrams, interaction diagrams, component diagrams, and deployment diagrams.
- Design enterprise applications for highly secured, multi-firewall DISA STIG environments.
- Develop automated just-in-time provisioning (JITP) solutions for user onboarding and offboarding.
- Implement application hardening and data protection for secure server deployments.
- Use open-source and enterprise penetration testing tools to test complete systems and produce fully documented penetration testing reports.
- Conduct application testing and debugging before production deployment and provide support during user acceptance testing (UAT).
- Provide technical guidance and mentoring for vulnerability analysis and remediation.
- Review software development life cycle phases to verify compliance with applicable web application development standards.
- Collaborate with network administration, database administration, and technical support teams to ensure cohesive system design and resolve technology issues.
- Support secure database design and administration, Active Directory programming, business continuity, and disaster recovery activities.
- Produce deployment documentation, support procedures, progress reports, and technical updates for management and business stakeholders.
- Support server infrastructure stability through monitoring, maintenance, troubleshooting, optimization, and equipment and software upgrades.
- Communicate effectively with technical professionals and stakeholders, manage multiple priorities, respond to support tickets, and contribute to process improvements.
- Follow information security guidelines and perform other related duties and special projects as assigned.
Required Qualifications
- 11+ years of experience with C# and .NET development.
- 11+ years of experience with penetration testing.
- 10+ years of experience with the state government.
- 11+ years of experience with full-stack MVC web development.
- 11+ years of experience with secure database design and administration.
- 11+ years of experience with Active Directory programming.
- 11+ years of experience with business continuity and disaster recovery.
- Bachelor's degree in information technology systems, Computer Science, or a related field.
Preferred Qualifications
- Experience with projects involving PCI, NIST, and/or Pub1075 security implementations or audits.
- Experience with projects involving DISA STIG.
- Experience with firewalls and load balancers.
- Experience with vulnerability remediation.
- Experience with Azure DevOps.
- At least one of the following certifications:
- Penetration testing certification
- Microsoft/Azure certification
- CompTIA Security+
Additional Skills
- Strong verbal and written communication skills.
- Ability to work effectively in a team development environment.
- Technical documentation and system architecture skills.
- Ability to communicate with technical teams, management, and business stakeholders.
- Strong analytical, organizational, and problem-solving skills.
- Ability to manage multiple tasks, prioritize issues, provide timely status updates, and contribute to continuous process improvement.
Pre-Employment Checks
- Employment is subject to the applicable checks specified for the engagement, including:
- Nationwide criminal history checks covering federal, state, and county records for jurisdictions where the candidate has resided during the preceding seven years, including applicable countries where relevant.
- Credit history check.
- E-Verify employment verification in accordance with the applicable FAR E-Verify requirements.
- South Carolina tax history review, with contractors required to be current on tax filings and payments.
