Cyber Engineer Architect - SIEM Security Architect

Cyber Engineer Architect
-SIEM Security Architect

Join GDIT as a Cyber Engineer Architect where innovation meets mission-critical infrastructure. We are seeking a forward-thinking engineer with a passion for network visibility, secure access, and cloud-edge integration. In this role, you'll leverage tools like Splunk, Palo Alto Prisma Access, Crowd Strike, F5, Gigamon, and Tenable One to enhance availability, scalability, and protection of systems supporting national objectives.

• 10+ years of hands-on experience deploying and architecting cybersecurity solutions including Security Information & Event Management (SIEM), Intrusion Detection/Prevention Systems (IDS/IPS), web content filtering, network forensics, and firewall management.
• Architect and deploy solutions using Splunk and Palo Alto.
• Lead the integration of Splunk SOAR with security tools, including SIEM (Splunk), Palo Alto, EDRs (e.g., Crowd Strike), and ticketing platforms (e.g., Service Now).
• Integrate Gigamon and Extra Hop visibility solutions to enable deep packet inspection, flow mapping, and toolchain optimization with Splunk.
• Collaborate with cross-functional teams to design and enforce system security controls aligned with NIST and FedRAMP frameworks, to include customer Enterprise Log Management standard.
• Troubleshoot and resolve system issues and provide escalation support for infrastructure-related incidents.
• Coach and mentor junior team members, fostering communication, collaboration, and encouragement. Works independently under limited supervision.
• Convey technical and architectural information to customer and customer support towers to improve security awareness and understanding of MSS solutions.

• Education:
  
  Bachelor's degree in Computer Engineering, Systems Engineering, or related field.
• Required Experience:
  
  10+ years of experience supporting complex IT cybersecurity infrastructure with a focus on risk mitigation and compliance awareness, with 5+ years experience deploying and architecting Splunk in a distributed implementation.
• Tools Proficiency:
  Splunk Cloud, Splunk ES, Splunk SOAR, & Splunk UBA
• Experience with secure remote access, cloud migration, load balancing, and traffic visibility platforms.
• Certifications:
  
  Required
  - Splunk Certified Architect
  ;
  Preferred
  - Splunk Core Consultant, Splunk Advanced Power User, Splunk Cloud Admin, Palo Alto Networks PCNSE, , or equivalent.
• Clearance:
  None. The selected candidate will be subject to a security investigation.
• Location:
  
  Remote.

• Full-flex work week to own your priorities
• 401K with company match
• Comprehensive health and wellness packages
• Internal mobility team dedicated to your career growth
• Professional growth opportunities including paid education and certifications
• Cutting-edge tech you can learn from
• Rest and recharge with paid vacation and holidays