Splunk Architect - Remote

We are seeking a Splunk Architect to join our cybersecurity operations team, tasked with delivering advanced solutions to protect enterprise environments against evolving cyber threats. The ideal candidate will possess expert-level knowledge of Splunk architecture, implementation, and optimization, with a proven ability to design, manage, and scale Splunk infrastructures tailored to dynamic operational needs. This role demands a strong foundation in cybersecurity principles alongside exceptional data correlation and analysis experience.

This can be a remote position with the requirement to travel on site as needed.

Key Responsibilities

Splunk Design & Architecture:

• Architect, deploy, and optimize comprehensive Splunk Enterprise and Splunk Enterprise Security (ES) environments to ensure high performance and scalability under diverse use cases.
• Lead the strategic development of Splunk solutions with a focus on modular designs, efficient configurations, and forward compatibility to meet future technological demands.
• Evaluate Splunk data inputs and integrations, devising workflows that maximize interoperability across hybrid networks.

Cyber Threat Analytics & Solutions:

• Develop tailored Splunk dashboards, advanced analytics tools, and system configurations to detect and correlate security events across complex enterprise environments.
• Analyze security logs and data streams to identify anomalous behaviors and high-risk patterns, enabling proactive mitigation of cybersecurity risks.
• Collaborate with internal teams to conduct forensic investigations, refine monitoring capabilities, and enhance threat intelligence workflows.

Security Operations Enablement:

• Spearhead initiatives to automate Splunk workflows using scripting tools such as Python and PowerShell, streamlining data parsing, alerting, and reporting.
• Provide technical mentorship to SOC analysts, forensic specialists, and IT administrators, fostering cross-functional alignment on security protocols and system best practices.

Compliance & Governance:

• Design Splunk architectures that adhere to organizational and regulatory compliance requirements, enabling solutions for audit readiness and policy enforcement.
• Maintain detailed documentation for architectural configurations, operational playbooks, and troubleshooting guides with a focus on maintaining cybersecurity standards.

Required Qualifications

Experience & Expertise:

• BA/BS or equivalent
• 15+ years of experience. 4 years of experience can be substituted for a degree.
• In-depth understanding of Splunk Enterprise Security environments, including expertise in Splunk Search Processing Language (SPL), modular data inputs, and advanced configurations.

Certifications:

• Splunk Enterprise Certified Architect or Splunk Core Certified Consultant. A candidate who has a current certification is preferred. If not, must demonstrate ability to obtain the certification within 30 days of start date.
• Additional certifications, such as Splunk Core Certified Consultant, Splunk Core Certified Power User, or similar, will strengthen candidacy.
• Relevant cybersecurity credentials like CISSP, CEH, Security+ CE, or GIAC certifications (e.g., GCIH or GCFA).

Security Clearance:

• Active Secret, TS/SCI, or DOE equivalent clearance (required).
• US Citizenship required

Desired Attributes

• Strong analytical mindset with the ability to critically evaluate data and propose innovative cybersecurity strategies.
• Exceptional communication skills to articulate technical findings and architectural decisions to both technical teams and non-technical stakeholders.
• Ability to thrive in high-pressure environments, delivering critical insights and solutions to address urgent cybersecurity threats.

GDIT IS YOUR PLACE
At GDIT, the mission is our purpose, and our people are at the center of everything we do.

• Growth: AI-powered career tool that identifies career steps and learning opportunities
• Support: An internal mobility team focused on helping you achieve your career goals
• Rewards: Comprehensive benefits and wellness packages, 401K with company match, and competitive pay and paid time off
• Flexibility: Full-flex work week to own your priorities at work and at home
• Community: Award-winning culture of innovation and a military-friendly workplace

OWN YOUR OPPORTUNITY
Explore a career in cyber at GDIT and you’ll find endless opportunities to grow alongside colleagues who share your focus on defending and protecting what matters.