Qualys Deployment Architect

DataDrone Inc.; Cheyenne, Northern (WY, KY); Hybrid; USD 100,000 - 160,000; Full time

Job summary

DataDrone Inc. is seeking a hands-on Qualys deployment architect to design, tune, and deliver a scalable Qualys environment for mid-market clients. You will craft asset models, write scan policies, and ship a deployment that clients can extend after Day 45.

You will integrate with ServiceNow, Splunk, Sentinel, and Jira, ensuring audit-ready evidence and robust documentation throughout. Strong cloud experience (AWS/Azure/GCP) and API-driven configuration are required.

Qualifications

• Deep, hands-on Qualys depth across the suite - VMDR as primary, with working knowledge of CSAM, WAS, and TotalCloud.
• Strong scan design instincts - sensitivity to false-positive cost, scan window logic, authentication health monitoring.
• Documentation-first habit - nothing lives in tribal knowledge; every architectural decision is written down as you make it.
• Comfort with cloud platforms (AWS, Azure, GCP) and the Cloud Agent deployment story across heterogeneous OSs.
• Ability to operate in a co-pilot rhythm - the client team is in every architectural call; you advise, they decide.
• Tooling fluency: Qualys API for bulk operations, version control for config exports, and modern documentation surfaces.

Responsibilities

• Own Qualys platform design through Day-7 baseline - Requirements Pack Section 3 signed.
• Build scan policy libraries across VMDR, CSAM, WAS, TotalCloud, Policy Compliance, and Cloud Agent (as scoped per engagement).
• Define asset tagging and grouping strategy reconciled against the client's CMDB or source of truth.
• Configure authentication records and credential rotation discipline (the single most common silent-failure mode in Qualys).
• Build dashboards for SecOps, Compliance, and Executive audiences - walked through with each audience before declaring done.
• Activate Policy Compliance phased, tune findings between phases, and deliver audit-ready evidence packages.
• Co-pilot the named client VM Program Owner through a full scan cycle before Day 45, so the handover is real.
• Write configuration documentation that a competent client engineer could rebuild the deployment from, with zero context.

Job description

DataDrone Inc. is seeking a hands-on Qualys deployment architect to design, tune, and deliver a scalable Qualys environment for mid-market clients. You will craft asset models, write scan policies, and ship a deployment that clients can extend after Day 45.

You will integrate with ServiceNow, Splunk, Sentinel, and Jira, ensuring audit-ready evidence and robust documentation throughout. Strong cloud experience (AWS/Azure/GCP) and API-driven configuration are required.