Security Architect - Consultant
Remote: Columbia, SC
About the Job

• Duration: 12-Month Contract Position with Potential for Extension
• Location: Remote – Columbia, SC / Nationwide within the Contiguous United States
• Schedule: Full-Time, 40 Hours/Week
• Core Hours: Eastern Time
• Pay Rate: Hourly
• Job ID:13810

Overview:
DataSoft Technologies is seeking an experienced Security Architect / Security Engineer Consultant to support a large enterprise cybersecurity environment within a statewide information security organization.
This is a highly technical, hands-on security engineering position focused primarily on security automation, Python development, custom security tool development, system integration, Identity and Access Management (IAM), Linux systems, and enterprise security technologies.
The successful candidate will work alongside Security Architects, Security Engineers, SOC Analysts, Incident Responders, and other cybersecurity professionals to design, develop, implement, integrate, administer, troubleshoot, and continuously improve security tools, automations, systems, and services supporting multiple agencies.
The position requires significant hands-on experience across both Security Engineering and Security Operations, including security automation workflows, internal applications, APIs, SDKs, dashboards, command-line tools, access controls, platform troubleshooting, Linux administration, documentation, and analyst enablement.
This position is 100% remote and will participate in an on-call rotation supporting a 24x7 Security Operations Center. After-hours maintenance, incident escalation support, and operational handoffs may be required as needed. Candidates may reside throughout the contiguous United States but must be able to work Eastern Time hours. Preference may be given to South Carolina-based candidates who can assist with equipment or hardware support when necessary.
Responsibilities:
Duties include, but are not limited to:

• Plan, design, develop, deploy, administer, maintain, and support enterprise cybersecurity automations and custom security tools.
• Develop and maintain Python-based security automations, internal web applications, APIs, SDK integrations, scripts, dashboards, command-line utilities, and other security system integrations.
• Design automated workflows supporting:
  • Security alert enrichment
  • Alert triage
  • Incident response
  • Case management
  • Notifications
  • Containment
  • Escalation
  • Security reporting
• Develop custom security tools supporting CVE vetting, vulnerability enrichment, prioritization, tracking, and security decision support.
• Develop, test, deploy, and maintain automated security workflows, applications, and scripts using Python, PowerShell, Bash, REST APIs, JSON, YAML, vendor SDKs, and related technologies.
• Integrate enterprise technologies through APIs, SDKs, web services, structured data formats, authentication mechanisms, and vendor-supported interfaces.
• Assist with the planning, implementation, administration, and operational support of security platforms including:
  • IAM
  • DSPM
  • ASM
  • SIEM
  • SOAR
  • XDR
  • Vulnerability Management
  • Email Security
  • Endpoint Security
  • Logging and Monitoring
  • Network Security
  • Cloud Security
  • Threat Intelligence
• Support Identity and Access Management (IAM) functions including user provisioning and deprovisioning, access reviews, Role-Based Access Control (RBAC), service accounts, API credentials, authentication, authorization, and identity-based integrations.
• Deploy, configure, patch, monitor, optimize, and troubleshoot Linux systems supporting security sensors, collectors, connectors, applications, containers, and data-processing services.
• Support Docker-based environments and other containerized security services.
• Troubleshoot complex issues spanning applications, security platforms, operating systems, networks, identity services, APIs, and integrations.
• Support Security Architects, Engineers, SOC Analysts, Incident Responders, and agency customers through technical escalation, automation development, platform troubleshooting, knowledge transfer, and operational handoffs.
• Monitor and report on automation health, application availability, system performance, sensor status, integration failures, API errors, vulnerability status, and other operational security metrics.
• Maintain high availability, resilience, backup, recovery, patching, lifecycle management, secure configuration, and controlled change processes for security systems and applications.
• Develop and maintain technical documentation, operational procedures, playbooks, and runbooks.
• Collaborate with cybersecurity and business stakeholders to align solutions with organizational goals, cybersecurity frameworks, regulatory requirements, and risk tolerance.

The source SOW specifically identifies Python-based automation, internal web applications, APIs, SDKs, alert and incident-response workflows, vulnerability tooling, IAM, Linux, Docker, and security platform integrations as core responsibilities.
Qualifications:
REQUIRED SKILLS/EXPERIENCE:

• 5+ years of experience supporting large IT environments, security systems, software development, and/or enterprise system deployments.
• Broad, hands-on Security Engineering experience supporting multiple cybersecurity technologies, systems, integrations, and operational functions.
• Strong experience integrating enterprise technologies using:
  • REST APIs
  • SDKs
  • Web services
  • Structured data formats
  • Authentication methods
  • Vendor-supported interfaces
• Advanced hands-on experience troubleshooting complex technical issues across applications, cybersecurity platforms, operating systems, networks, identity services, and system integrations.
• Strong Linux administration and engineering experience, including:
  • Deployment
  • Configuration
  • Patching
  • Scripting
  • Service management
  • Monitoring
  • Troubleshooting
  • Lifecycle management
• Hands-on experience developing security automation and response workflows using:
  • Python
  • PowerShell
  • Bash
  • REST APIs
  • JSON
  • YAML
  • Vendor SDKs
• Experience supporting enterprise cybersecurity technologies such as IAM, DSPM, ASM, vulnerability management, email security, endpoint security, SIEM, SOAR, logging, monitoring, and cloud security.
• Strong understanding of:
  • Enterprise Security Architecture
  • Incident Response
  • Networking
  • Access Control
  • Secure Software Development
  • Systems Administration
  • Industry-standard cybersecurity frameworks
• Ability to support security systems in a large, rapidly changing enterprise environment.
• Strong written and verbal communication skills.
• Ability to collaborate effectively with Security Architects, Engineers, Analysts, Incident Responders, technical teams, and business stakeholders.

These requirements align with the ranked technical requirements identified in the client SOW.
PREFERRED SKILLS:

• Hands-on experience working as a Security Engineering Generalist within a large enterprise, multi-tenant, shared-services, or managed-services environment.
• Advanced experience with Python development, including internal applications, APIs, databases, source control, testing, and software deployment practices.
• Experience developing or supporting internal:
  • Web applications
  • APIs
  • Dashboards
  • Databases
  • Command-line tools
  • Security utilities
• Hands-on experience with Linux, Docker, security sensors, monitoring platforms, scripting, and platform administration.
• Experience supporting Security Operations Centers and working directly with:
  • SOC Analysts
  • Security Engineers
  • Incident Responders
  • Enterprise customers
• Familiarity with enterprise security technologies such as:
  • Palo Alto Networks
  • Proofpoint
  • Tenable
  • Cribl
  • WhatsUp Gold (WUG)
  • Similar enterprise cybersecurity platforms
• Experience creating and maintaining security playbooks, runbooks, procedures, and technical documentation.
• Experience operating in environments with rapidly changing cybersecurity priorities.
• Strong understanding of automation workflow design, error handling, API throttling, data ingestion, and technical system integrations.
• DNS security knowledge.

The preferred requirements specifically call for large multi-tenant/shared-services security engineering experience, Linux/Docker administration, SOC support, and familiarity with Palo Alto Networks, Proofpoint, Tenable, Cribl, WUG, and similar technologies.
REQUIRED EDUCATION:

• Bachelor’s Degree in Information Technology, Computer Science, Software Engineering, Information Security, Cybersecurity, or a related field.

OR

• 8+ years of relevant professional experience may be substituted in lieu of the degree requirement.

The SOW expressly permits eight years of relevant experience in lieu of the degree.
PREFERRED CERTIFICATIONS:

• CISSP
• CompTIA Security+
• GIAC certification
• Linux certification
• Python certification
• Cloud certification
• IAM certification
• Other relevant Security Engineering, Cybersecurity, or platform certification

 
ADDITIONAL REQUIREMENTS:

• Must be able to work Eastern Time business hours.
• Must be available to participate in an on-call rotation supporting a 24x7 Security Operations Center.
• After-hours maintenance, incident escalation, and operational handoffs may occasionally be required.
• Work must be performed within the contiguous United States.
• Candidates must successfully complete required pre-employment screening.
• Successful candidates must obtain and maintain required CJIS certification after onboarding.

Required screening includes a seven-year background check, credit history check, MVR, E-Verify, and SLED check. CJIS certification will be required for this position and processed by client
About our Company
DataSoft Technologies is a highly recognized provider of professional IT Consulting services in the US. Founded in 1994, DataSoft Technologies, Inc. provides staff augmentation services for Information Technology and Automotive Services. Our team member benefits include:

• Paid Holidays/Paid Time Off (PTO)
• Medical/Dental Insurance Group
• Accident/Critical Illness Insurance
• Life Insurance
• 401 (K)