Lead Security Engineer / DTAM / (Hybrid) [Contingent]

Title: Lead Security Engineer Location: Remote / Hybrid (On site-visits to the DMV location as required by contract)iWorks Corporation, founded in 2005, is a leading provider of information technology and professional services to the federal government. We are a recognized leader in personnel security and vetting solutions, Agile, DevOps, DevSecOps, data analytics, and cloud solutions. Our continuous process improvement approach, combined with our business and technology expertise, results in innovative solutions. We offer exceptional comprehensive benefits (Medical, Dental, Vision, Life and Disability); 401(k); Health and Wellness Benefits; and Paid Sick Time, Vacation Time, and Holiday Time. Employees are eligible for bonuses throughout the year as part of our incentive program for innovation and business development. All employees are also considered for an annual raise, commensurate with performance and company commitment. About this position:The Lead Security Engineer supports the Decennial Transformation and Application Modernization (DTAM) initiative, a federal program designed to modernize the U.S. Census Bureau's Decennial Census systems into a cloud-smart, data-centric, and secure IT environment.This role provides both technical and management leadership across enterprise security initiatives, ensuring secure modernization of applications, data systems, and cloud infrastructure. The position plays a critical role in embedding security into DevSecOps pipelines and supporting secure, scalable, near real-time data processing and analytics.*This position is contingent upon contract award.Salary Range: –$135K – $170K commensurate with the candidate's skills, experience, location, and qualifications.On a day-to-day basis, you will:Provide technical and management leadership across major security and modernization initiatives supporting DTAM objectivesDefine and execute project goals, plans, and methods aligned with federal cloud modernization effortsDirect security engineering activities across application development, integration, and operations environmentsEnsure delivery of secure systems through DevSecOps practices and enterprise security governanceLead implementation of application security controls, policies, and frameworksOversee security architecture standards, design reviews, and technical trade-off analysesSupport vulnerability management, security testing, audits, and authorization activitiesGuide integration of security tooling into CI/CD pipelines and cloud-native environmentsManage staffing, delivery methods, and financial oversight for assigned security workstreamsEngage with client stakeholders and senior leadership through briefings, negotiations, and technical consultationsSupervise and mentor security engineering staff as assignedRequired Education/Qualifications:Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or related field (or equivalent experience)15+ years of experience in cybersecurity and/or security engineering roleDemonstrated experience leading technical and management efforts on large-scale IT or federal programsProven ability to define goals, plans, and execution strategies for complex security initiativesExperience interfacing with senior government or enterprise stakeholdersCybersecurity Frameworks & ComplianceNIST Risk Management Framework (RMF) NIST 800-53 security controls FedRAMP security requirements Security Authorization processes SSPs and POA&Ms Vulnerability management programs Application & Software SecuritySecure Software Development Lifecycle (SSDLC) Application security architecture Secure coding practices SAST/DAST/SCA tools Dependency and vulnerability scanning SBOM processes API security DevSecOps SecuritySecurity integration into CI/CD pipelines GitLab CI/CD security practices Jenkins security integrations Azure DevOps security controls Automated security testing Cloud & Container SecurityAWS GovCloud, Azure Government, OCI Government, or GCP Cloud security architecture Kubernetes security Docker/container security Infrastructure-as-Code security reviews Terraform and CloudFormation security considerations Security OperationsSIEM platforms Security monitoring Threat detection Security analytics Continuous monitoring practicesRequired Certifications:Certified Information Security Manager (CISM) Certified Information Systems Auditor (CISA)Preferred Certifications:Certified Information Systems Security Professional (CISSP)Certified Cloud Security Professional (CCSP)Please Note: We maintain an on-camera policy for all virtual company meetings to foster engagement and collaboration. Reasonable exceptions may be granted with prior approval from Human Resources and/or the applicable manager or client.FLSA & EMPLOYMENT STATUS: FLSA EXEMPT AND FULL-TIME POSITION.iWorks Corporation is an Equal Employment Opportunity/Affirmative Action Employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, Veteran status, sexual orientation, or other protected characteristic.iWorks is committed to maintaining a safe and productive work environment for all employees and ensuring the security and well-being of our clients. As part of our standard hiring process, we may conduct background checks and drug screenings on potential candidates to assess their suitability for employment.