Lead Security Engineer / DTAM / (Hybrid) [Contingent]

Title: Lead Security Engineer

Location: Remote / Hybrid (On site-visits to the DMV location as required by contract)

iWorks Corporation, founded in 2005, is a leading provider of information technology and professional services to the federal government. We are a recognized leader in personnel security and vetting solutions, Agile, DevOps, DevSecOps, data analytics, and cloud solutions. Our continuous process improvement approach, combined with our business and technology expertise, results in innovative solutions.

We offer exceptional comprehensive benefits (Medical, Dental, Vision, Life and Disability); 401(k); Health and Wellness Benefits; and Paid Sick Time, Vacation Time, and Holiday Time. Employees are eligible for bonuses throughout the year as part of our incentive program for innovation and business development. All employees are also considered for an annual raise, commensurate with performance and company commitment.

About this position:

The Lead Security Engineer supports the Decennial Transformation and Application Modernization (DTAM) initiative, a federal program designed to modernize the U.S. Census Bureau's Decennial Census systems into a cloud-smart, data-centric, and secure IT environment.

This role provides both technical and management leadership across enterprise security initiatives, ensuring secure modernization of applications, data systems, and cloud infrastructure. The position plays a critical role in embedding security into DevSecOps pipelines and supporting secure, scalable, near real-time data processing and analytics.

*This position is contingent upon contract award.

Salary Range: –$135K – $170K commensurate with the candidate's skills, experience, location, and qualifications.

On a day-to-day basis, you will:

Provide technical and management leadership across major security and modernization initiatives supporting DTAM objectives

Define and execute project goals, plans, and methods aligned with federal cloud modernization efforts

Direct security engineering activities across application development, integration, and operations environments

Ensure delivery of secure systems through DevSecOps practices and enterprise security governance

Lead implementation of application security controls, policies, and frameworks

Oversee security architecture standards, design reviews, and technical trade-off analyses

Support vulnerability management, security testing, audits, and authorization activities

Guide integration of security tooling into CI/CD pipelines and cloud-native environments

Manage staffing, delivery methods, and financial oversight for assigned security workstreams

Engage with client stakeholders and senior leadership through briefings, negotiations, and technical consultations

Supervise and mentor security engineering staff as assigned

Required Education/

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or related field (or equivalent experience)
• 15+ years of experience in cybersecurity and/or security engineering role
• Demonstrated experience leading technical and management efforts on large-scale IT or federal programs
• Proven ability to define goals, plans, and execution strategies for complex security initiatives
• Experience interfacing with senior government or enterprise stakeholders
• Cybersecurity Frameworks & Compliance
• NIST Risk Management Framework (RMF)
• NIST 800-53 security controls
• FedRAMP security requirements
• Security Authorization processes
• SSPs and POA&Ms
• Vulnerability management programs
• Application & Software Security
• Secure Software Development Lifecycle (SSDLC)
• Application security architecture
• Secure coding practices
• SAST/DAST/SCA tools
• Dependency and vulnerability scanning
• SBOM processes
• API security
• DevSecOps Security
• Security integration into CI/CD pipelines
• GitLab CI/CD security practices
• Jenkins security integrations
• Azure DevOps security controls
• Automated security testing
• Cloud & Container Security
• AWS GovCloud, Azure Government, OCI Government, or GCP
• Cloud security architecture
• Kubernetes security
• Docker/container security
• Infrastructure-as-Code security reviews
• Terraform and CloudFormation security considerations
• Security Operations
• SIEM platforms
• Security monitoring
• Threat detection
• Security analytics
• Continuous monitoring practices
• Required Certifications:
• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)
• Preferred Certifications:
• Certified Information Systems Security Professional (CISSP)
• Certified Cloud Security Professional (CCSP)
• Please Note: We maintain an on-camera policy for all virtual company meetings to foster engagement and collaboration. Reasonable exceptions may be granted with prior approval from Human Resources and/or the applicable manager or client.
• FLSA & EMPLOYMENT STATUS: FLSA EXEMPT AND FULL-TIME POSITION.
• iWorks Corporation is an Equal Employment Opportunity/Affirmative Action Employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, Veteran status, sexual orientation, or other protected characteristic.
• iWorks is committed to maintaining a safe and productive work environment for all employees and ensuring the security and well-being of our clients. As part of our standard hiring process, we may conduct background checks and drug screenings on potential candidates to assess their suitability for employment.