Security Architect

Work Arrangement: 100% Fully Remote (Nationwide within contiguous US; local South Carolina candidates preferred for occasional hardware assistance) Role Type: 12-Month Contract (10/19/2026 10/19/2027, with extension potential) Interview Process: 1 Round (Virtual or On-site for local resources) On-Call / Shift: Core hours 8:30 AM 5:00 PM EST; includes monthly on-call rotation for SOC support and after-hours maintenance. Mandatory Screening Requirements Non-negotiable conditions enforced during initial hiring and ongoing engagement:

• 7-Year Standard Background Check
• Credit History Check (Full credit check during initial hiring process)
• Motor Vehicle Record (MVR) / Driving Record Check
• E-Verify Verification
• SLED (South Carolina Law Enforcement Division) Check
• Annual CJIS Certification: Candidate must obtain and retain annual CJIS certification upon onboarding., * Security Automation & Tooling: Design, build, deploy, and support Python-based automations, internal web applications, REST APIs, SDKs, CLI tools, and automated incident response workflows (alert enrichment, triage, containment, escalation, and reporting).
• Vulnerability & CVE Integration: Develop custom tools for CVE vetting, vulnerability enrichment, prioritization tracking, and security decision support.
• Linux Platform Administration: Deploy, patch, configure, optimize, and troubleshoot Linux-based OS environments hosting security sensors, log collectors, Docker containers, and data-processing pipelines.
• Enterprise Security Platform Management: Provide secondary operational engineering support for DSPM, ASM, IAM, SIEM, SOAR, XDR, email security, endpoint protection, and network security tools (e.g., Palo Alto Networks, Proofpoint, Tenable, Cribl, WhatsUp Gold).
• Identity & Access Management (IAM): Manage user provisioning/deprovisioning workflows, RBAC, service accounts, API credentials, and identity-based system integrations.
• SOC & Analyst Enablement: Create playbooks, runbooks, and documentation; provide technical escalation support to 24x7 SOC analysts and incident responders.

• Education / Experience: Bachelor’s degree in IT, Computer Science, Software Engineering, or Information Security OR 8+ years of equivalent relevant work experience.
• Core Technical Experience: 5+ years of experience supporting large IT environments, security deployments, software development, and systems administration.
• Scripting & Automation Engineering: Demonstrated experience building response workflows and API integrations using Python, PowerShell, Bash, REST APIs, JSON, YAML, and Vendor SDKs.
• Linux Systems Mastery: Hands-on Linux administration, deployment, patching, service management, containerization (Docker), and sensor maintenance.
• Enterprise Security Architecture: In-depth knowledge of incident response, networking, access control, DNS security (e.g., Cisco Umbrella/Secure Access concepts), rate limiting/API throttling, and data ingestion workflows.

Preferred Skills & Certifications

• Certifications: CISSP, Security+, GIAC (GSEC/GCIA/GCIH), or specialized Linux/Python/Cloud/IAM certifications.
• Environment Experience: Hands-on generalist experience supporting multi-tenant, shared-services, or managed-service enterprise environments.
• Tooling Knowledge: Experience with Palo Alto Networks, Proofpoint, Tenable, Cribl, WhatsUp Gold, or equivalent enterprise security platforms.