SIEM Support- Splunk Architect

Gray Tier Technologies is looking for a SIEM Support Splunk Architect with an active Secret clearance to support our DOI customer's Security Operation Center in DC or Reston Virginia.

• Bachelor’s degree required.
• Minimum 12 years of experience.
• Provides technical direction and expertise in a variety of specialized areas including information systems engineering, systems architecture, systems integration, telecommunications, systems standards, process engineering, systems design and requirements specification within the Splunk Environment.
• May serve as technical director or as a senior technical staff member.
• Responsibilities may include a combination of the following:
• Establishes system information requirements.
• Designs architecture to include the software, hardware and communications to support the total requirements, evaluates and integrates cross- functional requirements and interfaces.
• Evaluates and defines system requirements.
• Performs enterprise-wide strategic systems planning.
• Provides technical and/or subject-matter expertise to project.
• May supervise technical staff.
• Additional job responsibilities may include the following:
• Architect complex and comprehensive SIEM solutions such as Splunk, Azure Sentinel, or IBM QRadar.
  
• Be proficient with scripting and automation languages such as Python and PowerShell for workflow development.
• Have adeptness to integrate with various systems and log sources, designing access control, analytics, architecting content management, and delivery, optimal performance and scalability for resiliency.
• Fine-tune components, integrating SIEM solutions with existing security tools, threat intelligence platforms, and data sources.
• Have comprehensive design experience for log collection, rules, reports alerts and analytics, and the ability to identify use cases and develop configurations.
• The SME may mentor and guide SIEM administrators in best practices for system configuration and maintenance.
• Certification in SIEM technology (e.g. Spunk Certified Architect) is required