IT - ADMIN - Security Architect - Consultant

Hello Associates,

***Greetings from My3Tech***

Position: IT - ADMIN - Security Architect - Consultant

Location: Columbia, SC (Remote)

Duration: 12+ Months

Job Description:

Objective / Summary

The Department of Administration's Division of Information Security is seeking a Security Architect - Consultant to serve as a contract Security Engineer supporting enterprise security operations, security automation, custom tool development, Identity and Access Management (IAM), Linux-based security platforms, and enterprise security technologies. The consultant will assist with the design, development, integration, implementation, optimization, and operational support of security tools, platforms, automations, and services that support multiple State agencies.

Scope of Services / Responsibilities

Primary Responsibilities

• Assist in the planning, design, development, deployment, administration, and operational support of enterprise security automation solutions and custom security tools.
• Develop and support:
  • Python-based security automations
  • Internal web applications
  • APIs and SDK integrations
  • Security dashboards
  • Command-line utilities
  • Custom scripts
  • Enterprise system integrations
• Design and implement automated workflows for:
  • Alert enrichment
  • Security triage
  • Incident response
  • Case management
  • Notifications
  • Containment activities
  • Escalations
  • Security reporting
• Develop custom security tools supporting:
  • CVE analysis and vetting
  • Vulnerability enrichment
  • Risk prioritization
  • Vulnerability tracking
  • Security decision support

Secondary Responsibilities

• Assist with planning, designing, deploying, integrating, and supporting enterprise security platforms, including:
  • DSPM
  • ASM
  • IAM
  • Vulnerability Management
  • Email Security
  • Endpoint Security
  • SIEM
  • XDR
  • SOAR
  • Logging and Monitoring Platforms
  • Network Security Solutions
  • Cloud Security Technologies
  • Threat Intelligence Platforms
• Support integrations between security platforms and:
  • Ticketing systems
  • Case management systems
  • Notification services
  • Identity platforms
  • Enterprise APIs
  • Data sources
  • SDKs
• Support technologies such as:
  • Palo Alto Networks
  • Proofpoint
  • Tenable
  • Cribl
  • WhatsUp Gold
  • Current and future enterprise security tools
• Develop, test, deploy, and maintain automation solutions using:
  • Python
  • PowerShell
  • Bash
  • REST APIs
  • JSON
  • YAML
  • Vendor SDKs
• Assist with Identity and Access Management functions including:
  • User provisioning and deprovisioning
  • Access reviews
  • Role-based access control (RBAC)
  • Service account administration
  • API credential management
  • Authentication and authorization services
  • Identity integrations
• Deploy, configure, patch, optimize, monitor, and troubleshoot Linux systems supporting:
  • Security sensors
  • Data collectors
  • Connectors
  • Security applications
  • Containers
  • Data-processing services
  • Docker-based environments
• Support security architects, engineers, analysts, incident responders, and agency customers through:
  • Technical troubleshooting
  • Automation development
  • Platform integrations
  • Escalation support
  • Knowledge transfer
  • Operational handoffs
• Monitor and report on:
  • Automation health
  • Application availability
  • System performance
  • Sensor health
  • Integration failures
  • API errors
  • Vulnerability status
  • Security platform issues
  • Operational metrics
• Ensure high availability, resilience, backup, recovery, patching, lifecycle management, and secure configuration of enterprise security solutions.
• Collaborate with stakeholders to align security solutions with business objectives, regulatory requirements, security frameworks, and organizational risk management practices.

Minimum Requirements

Security Engineering & Enterprise Security

• Extensive hands-on security engineering experience supporting multiple cybersecurity technologies, platforms, integrations, and operational functions.
• Strong experience supporting enterprise security operations and security engineering environments.
• Experience supporting SIEM, XDR, SOAR, IAM, vulnerability management, endpoint security, cloud security, logging, monitoring, and network security technologies.
• Experience with enterprise security architecture, implementation, integration, and operational support.

Security Automation & Development

• Strong experience developing automation and response workflows using:
  • Python
  • PowerShell
  • Bash
  • REST APIs
  • JSON
  • YAML
  • Vendor SDKs
• Experience developing and supporting custom security tools and internal applications.
• Experience creating and maintaining APIs, web services, dashboards, scripts, and command-line tools.
• Experience integrating enterprise technologies through APIs, SDKs, authentication services, and structured data formats.

Linux Administration

• Strong experience deploying, configuring, patching, monitoring, administering, troubleshooting, and maintaining Linux systems.
• Experience supporting Linux-based security sensors, collectors, applications, services, and containerized environments.
• Experience performing lifecycle management and operational support for Linux platforms.

Identity & Access Management

• Experience supporting:
  • User provisioning and deprovisioning
  • Access reviews
  • Role-based access controls
  • Service accounts
  • API credentials
  • Authentication and authorization solutions
  • Identity-based integrations

Troubleshooting & Operations

• Strong troubleshooting experience across:
  • Applications
  • Security platforms
  • Operating systems
  • Networks
  • Identity services
  • Enterprise integrations
• Experience supporting security operations teams in production environments.
• Experience performing root cause analysis and operational support activities.
• Ability to work independently in rapidly changing environments.

Preferred Qualifications

• Experience supporting large enterprise or government security environments.
• Experience supporting multiple state agencies or highly regulated organizations.
• Experience with Palo Alto Networks security products.
• Experience with Proofpoint security solutions.
• Experience with Tenable vulnerability management tools.
• Experience with Cribl logging and observability platforms.
• Experience with WhatsUp Gold monitoring solutions.
• Experience with Docker and containerized security services.
• Experience supporting cloud security and hybrid infrastructure environments.
• Experience implementing security automation frameworks and orchestration capabilities.
• Experience supporting Security Operations Centers (SOC).

Operational Requirements / Deliverables

• Participate in a 24x7 Security Operations Center on-call rotation.
• Provide after-hours maintenance and operational support as required.
• Support incident escalations and operational handoffs outside standard business hours.
• Design, implement, maintain, and continuously improve security automations and custom security tools.
• Develop and maintain technical documentation, operational procedures, and security engineering artifacts.
• Monitor and maintain system health, availability, and performance of security platforms and services.
• Support secure change management, patching, backup, recovery, and lifecycle management activities.
• Collaborate with architects, engineers, analysts, incident responders, and agency stakeholders.
• Deliver ongoing operational support for enterprise security technologies serving multiple State agencies.

Mandatory Screening Requirements

• Must successfully pass a full criminal background check.
• Must successfully pass a full credit check.
• Must obtain and maintain annual CJIS certification throughout the engagement.
• Candidates previously submitted to Posting ID 13280 are not eligible for submission.
• Withdrawn candidates may not be replaced.
• Travel-related costs for any onsite work are the responsibility of the consultant.