What are the responsibilities and job description for the .NET Security Architect position at CIS Technologies Inc.?
Title: .NET Security Architect
Mode: Full - Time Employment - Hybrid
Location: Columbia, SC (Locals to SC Only)
Duration: 12-18 months (Mid Term)
Notes: Target a Senior .NET Security Architect with extensive hands-on experience in C#/.NET development, penetration testing, full-stack MVC web development, secure database design and administration, Active Directory programming, business continuity, and disaster recovery. Candidates must have 11 years of experience in each of the specified technical areas, 10 years of state government experience, and a bachelor's degree in information technology systems, Computer Science, or a related field. Prioritize professionals who combine enterprise application architecture, secure software development, technical documentation, vulnerability analysis and remediation, and experience developing secure applications using C#/.NET 10. Preferred qualifications include PCI/NIST/Pub1075 security implementations or audits, DISA STIG, firewalls, load balancers, Azure DevOps, and at least one penetration testing, Microsoft/Azure, or CompTIA Security certification.
What You'll Do / Key Responsibilities
- Analyze project requirements and recommend appropriate technical approaches, tools, and methodologies.
- Design, develop, test, debug, and deploy secure enterprise applications using C#/.NET 10, including web, desktop, and console applications.
- Develop penetration testing tools and systems using C#/.NET 10.
- Develop and maintain enterprise application architecture models, component structures, and architecture frameworks.
- Prepare detailed technical specifications and system design documentation, including workflow models, class diagrams, interaction diagrams, component diagrams, and deployment diagrams.
- Design enterprise applications for highly secured, multi-firewall DISA STIG environments.
- Develop automated just-in-time provisioning (JITP) solutions for user onboarding and offboarding.
- Implement application hardening and data protection for secure server deployments.
- Use open-source and enterprise penetration testing tools to test complete systems and produce fully documented penetration testing reports.
- Conduct application testing and debugging before production deployment and provide support during user acceptance testing (UAT).
- Provide technical guidance and mentoring for vulnerability analysis and remediation.
- Review software development life cycle phases to verify compliance with applicable web application development standards.
- Collaborate with network administration, database administration, and technical support teams to ensure cohesive system design and resolve technology issues.
- Support secure database design and administration, Active Directory programming, business continuity, and disaster recovery activities.
- Produce deployment documentation, support procedures, progress reports, and technical updates for management and business stakeholders.
- Support server infrastructure stability through monitoring, maintenance, troubleshooting, optimization, and equipment and software upgrades.
- Communicate effectively with technical professionals and stakeholders, manage multiple priorities, respond to support tickets, and contribute to process improvements.
- Follow information security guidelines and perform other related duties and special projects as assigned.
Required Qualifications
- 11 years of experience with C# and .NET development.
- 11 years of experience with penetration testing.
- 10 years of experience with the state government.
- 11 years of experience with full-stack MVC web development.
- 11 years of experience with secure database design and administration.
- 11 years of experience with Active Directory programming.
- 11 years of experience with business continuity and disaster recovery.
- Bachelor's degree in information technology systems, Computer Science, or a related field.
Preferred Qualifications
- Experience with projects involving PCI, NIST, and/or Pub1075 security implementations or audits.
- Experience with projects involving DISA STIG.
- Experience with firewalls and load balancers.
- Experience with vulnerability remediation.
- Experience with Azure DevOps.
- At least one of the following certifications:
- Penetration testing certification
- Microsoft/Azure certification
- CompTIA Security
Additional Skills
- Strong verbal and written communication skills.
- Ability to work effectively in a team development environment.
- Technical documentation and system architecture skills.
- Ability to communicate with technical teams, management, and business stakeholders.
- Strong analytical, organizational, and problem-solving skills.
- Ability to manage multiple tasks, prioritize issues, provide timely status updates, and contribute to continuous process improvement.
Pre-Employment Checks
- Employment is subject to the applicable checks specified for the engagement, including:
- Nationwide criminal history checks covering federal, state, and county records for jurisdictions where the candidate has resided during the preceding seven years, including applicable countries where relevant.
- Credit history check.
- E-Verify employment verification in accordance with the applicable FAR E-Verify requirements.
- South Carolina tax history review, with contractors required to be current on tax filings and payments.
Salary : $120,000 - $160,000