Lead Splunk architect role providing technical authority for enterprise-scale SIEM, logging infrastructure, and data pipeline engineering supporting 24/7 federal cybersecurity operations centers. The role combines hands-on architecture design with strategic modernization of logging ecosystems across on-premises, cloud, and hybrid environments.
What you'll do
- Lead design, engineering, configuration, and optimization of enterprise logging platforms supporting CSOC operations with 24/7/365 uptime requirements
- Architect and manage SIEM infrastructure including log ingestion pipelines, parsing, normalization, enrichment, and storage strategies across diverse data sources
- Oversee onboarding of new data sources from applications, endpoints, networks, cloud environments, and identity systems
- Ensure log health monitoring, cluster health, pipeline resiliency, and data integrity validation for continuous reliability
- Drive modernization initiatives including automation, cloud logging integrations, and data optimization
- Maintain compliance with logging standards, federal mandates, and Zero Trust visibility requirements
- Produce technical documentation including architecture diagrams, data dictionaries, and detailed engineering reports
- Support vulnerability assessments, compliance audits, and cross-functional engineering reviews
Mission
Agile Defense supports USG customers delivering enterprise cybersecurity programs and Cyber Security Operations Center (CSOC) services. This role directly enables federal government security operations at scale, maintaining visibility and threat detection capabilities across complex interconnected systems while ensuring compliance with federal logging mandates and Zero Trust requirements.
Required skills
- Splunk architecture and configuration
- SIEM engineering and log ingestion pipelines
- Enterprise logging platform design and optimization
- Windows and Linux systems administration
- Bash, Python, and PowerShell scripting
- AWS cloud services
- Network security and log normalization
- Zero Trust architecture implementation
- Data parsing, enrichment, and storage strategies
- Compliance and federal mandate standards