Cyber Engineer Architect - SIEM Security Architect

General Dynamics Information Technology (GDIT) is a technology and professional services company delivering mission services and technology solutions to government, defense, and intelligence organizations. The Cyber Engineer Architect will design, deploy, and integrate cybersecurity and SIEM solutions using platforms such as Splunk and Palo Alto, while supporting network visibility, security controls, incident troubleshooting, and team mentorship.

Responsibilities:

• 10+ years of hands-on experience deploying and architecting cybersecurity solutions including Security Information & Event Management (SIEM), Intrusion Detection/Prevention Systems (IDS/IPS), web content filtering, network forensics, and firewall management
• Architect and deploy solutions using Splunk and Palo Alto
• Lead the integration of Splunk SOAR with security tools, including SIEM (Splunk), Palo Alto, EDRs (e.g., CrowdStrike), and ticketing platforms (e.g., ServiceNow)
• Integrate Gigamon and ExtraHop visibility solutions to enable deep packet inspection, flow mapping, and toolchain optimization with Splunk
• Collaborate with cross-functional teams to design and enforce system security controls aligned with NIST and FedRAMP frameworks, to include customer Enterprise Log Management standard
• Troubleshoot and resolve system issues and provide escalation support for infrastructure-related incidents
• Coach and mentor junior team members, fostering communication, collaboration, and encouragement. Works independently under limited supervision
• Convey technical and architectural information to customer and customer support towers to improve security awareness and understanding of MSS solutions

Requirements:

• 10 + years of related experience
• US Citizenship Required: No
• 10+ years of hands-on experience deploying and architecting cybersecurity solutions including Security Information & Event Management (SIEM), Intrusion Detection/Prevention Systems (IDS/IPS), web content filtering, network forensics, and firewall management
• Bachelor's degree in Computer Engineering, Systems Engineering, or related field
• 10+ years of experience supporting complex IT cybersecurity infrastructure with a focus on risk mitigation and compliance awareness, with 5+ years experience deploying and architecting Splunk in a distributed implementation
• Splunk Cloud, Splunk ES, Splunk SOAR, & Splunk UBA
• Experience with secure remote access, cloud migration, load balancing, and traffic visibility platforms
• Required - Splunk Certified Architect
• Preferred – Splunk Core Consultant, Splunk Advanced Power User, Splunk Cloud Admin, Palo Alto Networks PCNSE, , or equivalent