.NET Security Architect

Job Title :

Senior .NET Security Architect – C#, Penetration Testing & Enterprise Applications

Position Overview Work on the architecture, development, testing, and deployment of secure enterprise applications in a complex, security-focused environment. This role combines senior-level C#/.NET development, application security, penetration testing, and enterprise architecture with technical documentation and secure infrastructure support. You will collaborate with business stakeholders, application and systems analysts, database administrators, network administrators, and technical support teams to design secure, high-performance, maintainable applications.

The position also involves developing penetration testing tools, supporting vulnerability remediation, documenting architecture and deployment procedures, and contributing to secure software development life cycle practices. What You'll Do /

Key Responsibilities Analyze project requirements and recommend appropriate technical approaches, tools, and methodologies. Design, develop, test, debug, and deploy secure enterprise applications using C#/.NET 10, including web, desktop, and console applications. Develop penetration testing tools and systems using C#/.NET 10. Develop and maintain enterprise application architecture models, component structures, and architecture frameworks. Prepare detailed technical specifications and system design documentation, including workflow models, class diagrams, interaction diagrams, component diagrams, and deployment diagrams.

Design enterprise applications for highly secured, multi-firewall DISA STIG environments. Develop automated just-in-time provisioning (JITP) solutions for user onboarding and offboarding. Implement application hardening and data protection for secure server deployments. Use open-source and enterprise penetration testing tools to test complete systems and produce fully documented penetration testing reports. Conduct application testing and debugging before production deployment and provide support during user acceptance testing (UAT).

Provide technical guidance and mentoring for vulnerability analysis and remediation. Review software development life cycle phases to verify compliance with applicable web application development standards. Collaborate with network administration, database administration, and technical support teams to ensure cohesive system design and resolve technology issues. Support secure database design and administration, Active Directory programming, business continuity, and disaster recovery activities. Produce deployment documentation, support procedures, progress reports, and technical updates for management and business stakeholders.

Support server infrastructure stability through monitoring, maintenance, troubleshooting, optimization, and equipment and software upgrades. Communicate effectively with technical professionals and stakeholders, manage multiple priorities, respond to support tickets, and contribute to process improvements. Follow information security guidelines and perform other related duties and special projects as assigned.

Required Qualifications 11+ years of experience with C# and .NET development. 11+ years of experience with penetration testing. 10+ years of experience with state government. 11+ years of experience with full-stack MVC web development. 11+ years of experience with secure database design and administration. 11+ years of experience with Active Directory programming. 11+ years of experience with business continuity and disaster recovery.

Bachelor's degree in Information Technology Systems, Computer Science, or a related field.

Preferred Qualifications

Experience with projects involving PCI, NIST, and/or Pub
1075 security implementations or audits.

Experience with projects involving DISA STIG.

Experience with firewalls and load balancers.

Experience with vulnerability remediation.

Experience with Azure Dev Ops. At least one of the following certifications:
Penetration testing certification Microsoft/Azure certification CompTIA Security+ Additional Skills Strong verbal and written communication skills. Ability to work effectively in a team development environment. Technical documentation and system architecture skills. Ability to communicate with technical teams, management, and business stakeholders. Strong analytical, organizational, and problem-solving skills. Ability to manage multiple tasks, prioritize issues, provide timely status updates, and…