Lead Security Engineer​/DTAM​/Hybrid Contingent Security Clearance

Position: Lead Security Engineer / DTAM / (Hybrid) [Contingent] with Security Clearance
Title:

Lead Security Engineer

Location:

Remote / Hybrid (On site-visits to the DMV location as required by contract) iWorks Corporation, founded in 2005, is a leading provider of information technology and professional services to the federal government. We are a recognized leader in personnel security and vetting solutions, Agile, Dev Ops, Dev Sec Ops , data analytics, and cloud solutions. Our continuous process improvement approach, combined with our business and technology expertise, results in innovative solutions.

We offer exceptional comprehensive benefits (Medical, Dental, Vision, Life and Disability); 401(k);
Health and Wellness Benefits; and Paid Sick Time, Vacation Time, and Holiday Time. Employees are eligible for bonuses throughout the year as part of our incentive program for innovation and business development. All employees are also considered for an annual raise, commensurate with performance and company commitment. About this position:
The Lead Security Engineer supports the Decennial Transformation and Application Modernization (DTAM) initiative, a federal program designed to modernize the U.S. Census Bureau's Decennial Census and American Community Survey (ACS) systems into a cloud-smart, data-centric, and secure IT environment. This role provides both technical and management leadership across enterprise security initiatives, ensuring secure modernization of applications, data systems, and cloud infrastructure.

The position plays a critical role in embedding security into Dev Sec Ops  pipelines and supporting secure, scalable, near real-time data processing and analytics.
* This position is contingent upon contract award. Salary Range: –$135K – $170K commensurate with the candidate's skills, experience, location, and qualifications. On a day-to-day basis, you will:
* Provide technical and management leadership across major security and modernization initiatives supporting DTAM objectives
* Define and execute project goals, plans, and methods aligned with federal cloud modernization efforts
* Direct security engineering activities across application development, integration, and operations environments
* Ensure delivery of secure systems through Dev Sec Ops  practices and enterprise security governance
* Lead implementation of application security controls, policies, and frameworks
* Oversee security architecture standards, design reviews, and technical trade-off analyses
* Support vulnerability management, security testing, audits, and authorization activities
* Guide integration of security tooling into CI/CD pipelines and cloud-native environments
* Manage staffing, delivery methods, and financial oversight for assigned security work streams
* Engage with client stakeholders and senior leadership through briefings, negotiations, and technical consultations
* Supervise and mentor security engineering staff as assigned Required Education/

Qualifications:

* Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or related field (or equivalent experience)
* 15+ years of experience in cybersecurity and/or security engineering roles

Required Skills:

* Expert-level cybersecurity domain knowledge
* Strong technical leadership in application security and enterprise security architecture
* Deep experience integrating security into Dev Sec Ops  environments
* Experience overseeing enterprise-scale security governance, risk, and compliance efforts
* Strong decision-making authority in high-impact technical environments Required Tools, Technologies, or Platforms:
* Dev Sec Ops  and CI/CD pipelines (e.g., Jenkins, Git Lab CI/CD, Azure Dev Ops)
* Zero Trust Architecture frameworks
* Security Information and Event Management (SIEM) tools
* Software Bill of Materials (SBOM) tools
* Static and Dynamic Application Security Testing (SAST/DAST) tools
* Infrastructure as Code (IaC) tools (e.g., Terraform, Cloud Formation)
* Microservices architectures
* APIs and API security frameworks
* Serverless and containerized architectures (e.g., Kubernetes, Docker)
* Enterprise Architecture tools
* Cybersecurity Assessment and Management platforms Preferred

Certifications:

* Certified…