Lead Security Engineer / DTAM / (Hybrid) [Contingent]

iWorks Corporation; Silver Spring (MD); Hybrid; USD 135,000 - 170,000; Full time

Benefits offered by this job

Medical, Dental, Vision, Life and Disability benefits

401(k) plan

Paid Sick Time, Vacation Time, and Holiday Time

Bonus eligible based on performance

Annual raises based on performance

Job summary

iWorks Corporation is seeking a Lead Security Engineer to support the Decennial Transformation and Application Modernization initiative for the U.S. Census Bureau. This role involves providing technical and management leadership in enterprise security initiatives, ensuring secure modernization of applications and data systems.

With a focus on securing DevSecOps pipelines, the ideal candidate will have extensive experience in cybersecurity and technical leadership. The position offers a remote/hybrid working option with a salary range of $135K – $170K depending on skills and qualifications.

Qualifications

• 15+ years of experience in cybersecurity and/or security engineering roles.

Responsibilities

• Provide technical and management leadership across major security and modernization initiatives.
• Define and execute project goals aligned with federal cloud modernization efforts.
• Direct security engineering activities across application development and operations.
• Ensure delivery of secure systems through DevSecOps practices.

Skills

Expert-level cybersecurity domain knowledge

Strong technical leadership in application security and enterprise security architecture

Deep experience integrating security into DevSecOps environments

Experience overseeing enterprise-scale security governance, risk, and compliance efforts

Education

Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or related field

Tools

DevSecOps and CI/CD pipelines (e.g., Jenkins, GitLab CI/CD, Azure DevOps)

Zero Trust Architecture frameworks

Security Information and Event Management (SIEM) tools

Software Bill of Materials (SBOM) tools

Static and Dynamic Application Security Testing (SAST/DAST) tools

Infrastructure as Code (IaC) tools (e.g., Terraform, CloudFormation)

Microservices architectures

APIs and API security frameworks

Serverless and containerized architectures (e.g., Kubernetes, Docker)

Enterprise Architecture tools

Cybersecurity Assessment and Management platforms

Job description

Title: Lead Security Engineer

Location: Remote / Hybrid (On site-visits to the DMV location as required by contract)

We offer exceptional comprehensive benefits (Medical, Dental, Vision, Life and Disability); 401(k); Health and Wellness Benefits; and Paid Sick Time, Vacation Time, and Holiday Time. Employees are eligible for bonuses throughout the year as part of our incentive program for innovation and business development. All employees are also considered for an annual raise, commensurate with performance and company commitment.

About this position:

The Lead Security Engineer supports the Decennial Transformation and Application Modernization (DTAM) initiative, a federal program designed to modernize the U.S. Census Bureau's Decennial Census and American Community Survey (ACS) systems into a cloud-smart, data-centric, and secure IT environment.

This role provides both technical and management leadership across enterprise security initiatives, ensuring secure modernization of applications, data systems, and cloud infrastructure. The position plays a critical role in embedding security into DevSecOps pipelines and supporting secure, scalable, near real‑time data processing and analytics.

*This position is contingent upon contract award.

Salary Range: –$135K – $170K commensurate with the candidate's skills, experience, location, and qualifications.

On a day-to-day basis, you will:

1. Provide technical and management leadership across major security and modernization initiatives supporting DTAM objectives
2. Define and execute project goals, plans, and methods aligned with federal cloud modernization efforts
3. Direct security engineering activities across application development, integration, and operations environments
4. Ensure delivery of secure systems through DevSecOps practices and enterprise security governance
5. Lead implementation of application security controls, policies, and frameworks
6. Oversee security architecture standards, design reviews, and technical trade‑off analyses
7. Support vulnerability management, security testing, audits, and authorization activities
8. Guide integration of security tooling into CI/CD pipelines and cloud‑native environments
9. Manage staffing, delivery methods, and financial oversight for assigned security workstreams
10. Engage with client stakeholders and senior leadership through briefings, negotiations, and technical consultations
11. Supervise and mentor security engineering staff as assigned

Required Education/Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or related field (or equivalent experience)
• 15+ years of experience in cybersecurity and/or security engineering roles

Required Skills

• Expert-level cybersecurity domain knowledge
• Strong technical leadership in application security and enterprise security architecture
• Deep experience integrating security into DevSecOps environments
• Experience overseeing enterprise-scale security governance, risk, and compliance effortsStrong decision-making authority in high‑impact technical environments

Required Tools, Technologies, or Platforms

• DevSecOps and CI/CD pipelines (e.g., Jenkins, GitLab CI/CD, Azure DevOps)
• Zero Trust Architecture frameworks
• Security Information and Event Management (SIEM) tools
• Software Bill of Materials (SBOM) tools
• Static and Dynamic Application Security Testing (SAST/DAST) tools
• Infrastructure as Code (IaC) tools (e.g., Terraform, CloudFormation)
• Microservices architectures
• APIs and API security frameworks
• Serverless and containerized architectures (e.g., Kubernetes, Docker)
• Enterprise Architecture tools
• Cybersecurity Assessment and Management platforms

Preferred Certifications

• Certified Cloud Security Professional (CCSP)
• Certified Information Security Manager (CISM)
• Certified Information Systems Auditor (CISA)

Please Note

We maintain an on‑camera policy for all virtual company meetings to foster engagement and collaboration. Reasonable exceptions may be granted with prior approval from Human Resources and/or the applicable manager or client.

FLSA & EMPLOYMENT STATUS

FLSA EXEMPT AND FULL‑TIME POSITION

iWorks Corporation is an Equal Employment Opportunity/Affirmative Action Employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, Veteran status, sexual orientation, or other protected characteristic.

iWorks is committed to maintaining a safe and productive work environment for all employees and ensuring the security and well‑being of our clients. As part of our standard hiring process, we may conduct background checks and drug screenings on potential candidates to assess their suitability for employment.