Security Architect / Security Engineer consultant

**Security Architect / Security Engineer consultant

Job Location:** Columbia, SC.

Position Type: W2 Contract

Work Mode: 100% Remote

Work Hours: 8:30 AM 5:00 PM EST only (Should work as per EST timezone)

On-Call: Monthly rotation supporting a 24x7 Security Operations Center (SOC)

Position Overview We are seeking an experienced Security Architect / Security Engineer Consultant to support cybersecurity automation, security tool development, identity and access management, Linux systems, enterprise security platforms, and security operations.

The successful candidate will work as part of a large enterprise security team and contribute to the design, development, implementation, integration, troubleshooting, and continuous improvement of security tools, automations, systems, and services.

The role requires strong hands-on experience across security engineering and security operations, with particular emphasis on Python development, security automation, system integration, Linux administration, APIs, IAM, and enterprise security technologies .

Primary Skills

• Broad hands-on Security Engineering experience across multiple cybersecurity technologies, systems, integrations, and operational functions

• Strong experience developing security automations, scripts, integrations, utilities, and custom security tools using Python

• Advanced Python development experience

• Strong troubleshooting skills across:

• Security applications and platforms

• Operating systems

• Networks

• Identity services

• System integrations

• Hands-on Linux system deployment, configuration, patching, scripting, service management, monitoring, troubleshooting, and lifecycle management

• Experience developing automation and response workflows using:

• Python

• PowerShell

• Bash

• REST APIs

• JSON

• YAML

• Vendor SDKs

• Experience integrating enterprise technologies through APIs, SDKs, web services, structured data formats, authentication methods, and vendor-supported interfaces

**Key Responsibilities

Security Automation & Tool Development**

• Plan, design, develop, deploy, administer, and provide operational support for enterprise security automations and custom security tools.

• Develop and maintain Python-based automations, internal web applications, APIs, SDK integrations, scripts, dashboards, command-line utilities, and system integrations.

• Develop automated workflows for:

• Alert enrichment

• Alert triage

• Incident response

• Case management

• Notifications

• Containment

• Escalation

• Reporting

• Develop custom tools supporting CVE vetting, vulnerability enrichment, prioritization, tracking, and security decision support.

• Test, deploy, troubleshoot, and continuously improve security applications and automated workflows.

Enterprise Security Platforms

• Support the planning, design, deployment, and operation of enterprise security platforms and technologies.

• Support security capabilities including:

• Identity and Access Management (IAM)

• Data Security Posture Management (DSPM)

• Attack Surface Management (ASM)

• Vulnerability Management

• Email Security

• Endpoint Security

• SIEM

• XDR

• SOAR

• Logging and Monitoring

• Network Security

• Cloud Security

• Threat Intelligence

• Integrate security platforms with ticketing, case management, notification, identity, data sources, APIs, SDKs, and other enterprise systems.

IAM & Linux Administration

• Support IAM functions including user provisioning and deprovisioning, access reviews, role-based access control, service accounts, API credentials, authentication, authorization, and identity integrations.
• Deploy, configure, patch, monitor, optimize, and troubleshoot Linux systems supporting security sensors, collectors, connectors, applications, containers, and data-processing services.
• Support Docker-based environments and related security infrastructure.

Security Operations & Support

• Support security architects, engineers, SOC analysts, incident responders, and business stakeholders through technical troubleshooting, automation development, system integration, escalation support, knowledge transfer, and operational handoffs.
• Monitor automation health, application availability, system performance, sensor status, integration failures, API errors, vulnerability status, and other security engineering metrics.
• Support a 24x7 SOC through a monthly on-call rotation.
• Provide after-hours maintenance, incident escalation support, and operational handoffs as required.
• Ensure high availability, resilience, backup, recovery, patching, lifecycle management, secure configuration, and controlled change processes for security tools and supporting systems.

Preferred Skills

• Experience serving as a Security Engineering Generalist in a large, multi-tenant, shared-services, or managed-services environment.

• Hands-on experience with:

• Linux

• Docker

• Security sensors

• Monitoring

• Scripting

• Security platform administration

• Experience supporting SOC analysts, security engineers, incident responders, and enterprise customers in rapidly changing operational environments.

• Experience developing playbooks, runbooks, procedures, and technical documentation.

• Familiarity with enterprise security technologies such as:

• Palo Alto Networks

• Proofpoint

• Tenable

• Cribl

• WhatsUp Gold

• Experience supporting IAM, DSPM, ASM, vulnerability management, email security, endpoint security, SIEM, SOAR, logging, monitoring, cloud security, and related enterprise security technologies.

• Strong understanding of:

• Enterprise security architecture

• Incident response

• Networking

• Access control

• Secure software development

• Systems administration

• Industry-standard cybersecurity frameworks

• Experience developing or supporting internal web applications, APIs, dashboards, databases, command-line tools, and related software components.

• Familiarity with source control, testing, software deployment, and full-stack development practices.

Education

• Bachelor's degree in Information Technology, Computer Science, Software Engineering, Information Security, or a related field preferred.
• 8 years of relevant professional experience may be substituted in lieu of education.
• At least 5 years of experience supporting large IT environments, security systems, software development, and/or system deployments.

Preferred Certifications

• CISSP
• Security+
• GIAC
• Other relevant cybersecurity certifications
• Linux certifications
• Python certifications
• Cloud certifications
• IAM certifications
• Other relevant security engineering or platform certifications

Additional Requirements

• Must be able to successfully complete required background screening.
• Annual CJIS certification is required.
• Must be able to participate in a monthly on-call rotation supporting a 24x7 SOC.
• Must be available for after-hours maintenance and incident escalation support as needed.
• Work must be performed within the contiguous United States.
• Candidates based in South Carolina are preferred when they can provide in-state field support for equipment or hardware when required.
• VPN access and required organizational equipment will be provided.

Ideal Candidate The ideal candidate is a hands-on security engineer with strong software development and automation capabilities who can operate across both security engineering and security operations . The candidate should be comfortable developing Python-based security solutions, integrating enterprise security platforms, administering Linux systems, troubleshooting complex environments, and collaborating with architects, engineers, analysts, incident responders, and stakeholders