Cyber Engineer Architect - SIEM Security Architect

Public Trust: Other

Requisition Type: Regular

Your Impact

Own your opportunity to work alongside federal civilian agencies. Make an impact by delivering solutions that improve citizen services millions depends on.

Job Description

Cyber Engineer Architect –SIEM Security Architect

Join GDIT as a Cyber Engineer Architect where innovation meets mission-critical infrastructure. We are seeking a forward-thinking engineer with a passion for network visibility, secure access, and cloud-edge integration. In this role, you’ll leverage tools like Splunk, Palo Alto Prisma Access, CrowdStrike, F5, Gigamon, and Tenable One to enhance availability, scalability, and protection of systems supporting national objectives.

HOW A CYBER ENGINEER ARCHITECT WILL MAKE AN IMPACT

· 10+ years of hands-on experience deploying and architecting cybersecurity solutions including Security Information & Event Management (SIEM), Intrusion Detection/Prevention Systems (IDS/IPS), web content filtering, network forensics, and firewall management.

· Architect and deploy solutions using Splunk and Palo Alto.

· Lead the integration of Splunk SOAR with security tools, including SIEM (Splunk), Palo Alto, EDRs (e.g., CrowdStrike), and ticketing platforms (e.g., ServiceNow).

· Integrate Gigamon and ExtraHop visibility solutions to enable deep packet inspection, flow mapping, and toolchain optimization with Splunk.

· Collaborate with cross-functional teams to design and enforce system security controls aligned with NIST and FedRAMP frameworks, to include customer Enterprise Log Management standard.

· Troubleshoot and resolve system issues and provide escalation support for infrastructure-related incidents.

· Coach and mentor junior team members, fostering communication, collaboration, and encouragement. Works independently under limited supervision.

· Convey technical and architectural information to customer and customer support towers to improve security awareness and understanding of MSS solutions.

WHAT YOU’LL NEED TO SUCCEED

● Education: Bachelor’s degree in Computer Engineering, Systems Engineering, or related field.

● Required Experience: 10+ years of experience supporting complex IT cybersecurity infrastructure with a focus on risk mitigation and compliance awareness, with 5+ years experience deploying and architecting Splunk in a distributed implementation.

● Tools Proficiency: Splunk Cloud, Splunk ES, Splunk SOAR, & Splunk UBA

● Experience with secure remote access, cloud migration, load balancing, and traffic visibility platforms.

● Certifications: Required - Splunk Certified Architect ; Preferred – Splunk Core Consultant, Splunk Advanced Power User, Splunk Cloud Admin, Palo Alto Networks PCNSE, , or equivalent.

● Clearance: None. The selected candidate will be subject to a security investigation.

● Location: Remote.

GDIT IS YOUR PLACE

● Full-flex work week to own your priorities

● 401K with company match

● Comprehensive health and wellness packages

● Internal mobility team dedicated to your career growth

● Professional growth opportunities including paid education and certifications

● Cutting-edge tech you can learn from

● Rest and recharge with paid vacation and holidays

Work Requirements

Years of Experience

10 + years of related experience

* may vary based on technical training, certification(s), or degree

Certification

Splunk Enterprise Certified Architect | Splunk - Splunk

Splunk SOAR Certified Automation Developer | Splunk - Splunk

Splunk Cloud Certified Admin | Splunk - Splunk

Travel Required

Less than 10%