Security Architect

About the Role

This contract position serves as a Security Architect for Our Client’s Division of Information Security. The role focuses on designing, developing, and maintaining security automation and custom tooling across a large, multi‑agency environment. Working remotely while aligning with Eastern Time Zone hours, the specialist will collaborate with a broad security team to strengthen the organization’s overall security posture. The position offers the opportunity to influence enterprise‑wide security strategies and ensure compliance with stringent regulatory standards such as CJIS.

Key Responsibilities

• Design, develop, and implement security automation solutions and custom tools to streamline protection workflows.
• Integrate and manage identity and access management controls across enterprise systems.
• Configure, harden, and maintain Linux‑based servers and related security platforms.
• Collaborate with security architects, engineers, analysts, and incident responders to enhance overall security architecture.
• Provide after‑hours maintenance, incident escalation support, and operational handoffs as required.
• Continuously improve security tools, scripts, and processes based on emerging threats and best practices.
• Offer technical guidance for the deployment and integration of security technologies.
• Ensure all solutions meet CJIS and other regulatory compliance requirements.
• Document security designs, configurations, and standard operating procedures.

Required Skills & Experience

• Minimum 7 years of experience in security engineering, automation, and custom tool development.
• Strong proficiency in scripting languages such as Python, PowerShell, and Bash for automation tasks.
• Hands‑on experience with identity and access management solutions (e.g., Active Directory, LDAP, SAML, OAuth).
• Deep knowledge of Linux operating systems and security hardening techniques.
• Experience with enterprise security technologies including SIEM, endpoint protection, vulnerability scanners, firewalls, and network monitoring tools.
• Proven ability to design and integrate security solutions in large, multi‑agency environments.
• CJIS certification (or ability to obtain) is required.
• Ability to work Eastern Time Zone hours and provide on‑call/after‑hours support.
• Excellent written and verbal communication skills for documentation and stakeholder interaction.

Tools & Technologies

• Scripting: Python, PowerShell, Bash.
• Configuration Management: Ansible, Chef, Puppet (commonly used in automation).
• Identity & Access Management: Active Directory, LDAP, Okta, Azure AD.
• SIEM Platforms: Splunk, IBM QRadar.
• Vulnerability Management: Nessus, Qualys.
• Endpoint Protection: CrowdStrike, Carbon Black.
• Cloud Platforms (optional): AWS, Microsoft Azure.
• Version Control: Git.
• ITSM/Ticketing: ServiceNow, JIRA.
• Operating Systems: Linux (RHEL, CentOS, Ubuntu), Windows Server.

Work Schedule & Duration

• Contract length: 12 months with possibility of extension.
• Work arrangement: Fully remote; candidate must be able to work Eastern Time Zone hours.
• After‑hours maintenance and occasional onsite visits may be required; travel costs are the resource’s responsibility.

Interview Process

The interview process consists of a single round, conducted virtually or onsite for local candidates. The session will assess technical expertise, problem‑solving abilities, and fit with the client’s security team.

Position Details

• Employment Type: Contract
• Duration: Approximately 12 months (with potential for extension)
• Work Authorization: Must be authorized to work in the United States