Senior .NET Security Architect - C#, Penetration Testing & Enterprise Applications

Full Time Columbia, SC Visa: US CitizenGreen CardGC-EADH1BH4-EADTNEAD

Skills: C#, Penetration Testing, Secure Enterprise Application Architecture, MVC Web Development, Secure Database Design, Active Directory Programming, Business Continuity, Disaster Recovery, Technical Documentation, Troubleshooting, Application Security, Enterprise Architecture, DISA STIG Requirements, Automated JITP Solutions, PCI Compliance, NIST Compliance, IRS Publication 1075 Compliance, Firewalls, Load Balancers, Vulnerability Remediation, Azure DevOps Position Overview: We are seeking a Senior .NET Security Architect to design, develop, test, and deploy secure enterprise applications in a security-focused environment. This role combines advanced C#/.NET development, penetration testing, application security, enterprise architecture, and secure infrastructure support. The ideal candidate will have extensive experience in state government environments, secure application development, vulnerability remediation, and security compliance. Responsibilities include developing penetration testing tools, documenting technical architecture, supporting secure deployments, and ensuring compliance with applicable security standards. Key Responsibilities Analyze project requirements and recommend appropriate technical solutions, tools, and development methodologies. Design, develop, test, debug, and deploy secure web, desktop, and console applications using C# and .NET 10. Develop penetration testing tools and systems using C#/.NET. Design and maintain enterprise application architectures, component models, and architecture frameworks. Prepare technical specifications and system documentation, including workflow, class, interaction, component, and deployment diagrams. Design and maintain applications for highly secured, multi-firewall environments following DISA STIG requirements. Develop automated just-in-time provisioning (JITP) solutions for user onboarding and offboarding. Implement application hardening and data protection for secure server deployments. Conduct penetration testing using open-source and enterprise tools and produce detailed testing reports. Perform application testing and debugging, support user acceptance testing (UAT), and validate production readiness. Guide technical teams in vulnerability analysis, remediation, and secure development practices. Review SDLC processes to ensure compliance with applicable web application development standards. Collaborate with network administrators, database administrators, and technical support teams to resolve technical issues and maintain system integrity. Support secure database design, Active Directory programming, business continuity, and disaster recovery. Prepare deployment guides, support procedures, progress reports, and technical updates for management and stakeholders. Monitor and maintain server infrastructure, troubleshoot issues, optimize performance, and support hardware and software upgrades. Manage multiple priorities, respond to support tickets, communicate progress, and contribute to continuous process improvement. Follow information security policies and perform related technical duties as required. Required Qualifications 11+ years of experience in C# and .NET development. 11+ years of penetration testing experience. 10+ years of experience working with state government. 11+ years of full-stack MVC web development experience. 11+ years of secure database design and administration experience. 11+ years of Active Directory programming experience. 11+ years of business continuity and disaster recovery experience. Bachelor’s degree in Information Technology Systems, Computer Science, or a related field. Strong expertise in secure enterprise application architecture, technical documentation, and troubleshooting. Excellent analytical, communication, organizational, and problem-solving skills. Ability to work effectively with technical teams, management, and business stakeholders. Preferred Qualifications Experience with PCI, NIST, and/or IRS Publication 1075 (Pub 1075) security implementations or audits. Experience implementing or assessing DISA STIG requirements. Experience with firewalls and load balancers. Experience with vulnerability remediation. Experience with Azure DevOps. One or more of the following certifications: Penetration testing certification Microsoft or Azure certification CompTIA Security+ certification