Cyber Engineer Architect

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Cyber Engineer Architect – SIEM Security Architect based in the United States.

• Design, architect, deploy, and maintain advanced cybersecurity solutions, including SIEM platforms, IDS/IPS, web content filtering, network forensics, and firewall management
• Architect and implement distributed Splunk environments, optimizing log ingestion, data processing, security monitoring, scalability, and operational performance
• Lead the integration of Splunk SOAR with SIEM platforms, Palo Alto security solutions, endpoint detection and response tools such as CrowdStrike, and ticketing systems such as ServiceNow
• Integrate Gigamon and ExtraHop visibility solutions to support deep packet inspection, network flow mapping, enhanced threat investigation, and security toolchain optimization
• Develop and enhance enterprise log management capabilities
• Collaborate with cross-functional teams to design, implement, and enforce security controls aligned with NIST, FedRAMP, and applicable enterprise log management standards
• Diagnose and resolve complex cybersecurity and infrastructure issues
• Support secure remote access, cloud migration, load balancing, and network visibility initiatives
• Explain security architectures, technical designs, and operational capabilities to customers and support teams
• Coach junior engineers and share technical knowledge

• Bachelor's degree in Computer Engineering, Systems Engineering, or a related technical field
• At least 10 years of relevant experience supporting complex IT cybersecurity infrastructure
• At least five years of experience deploying and architecting distributed Splunk implementations
• Strong hands-on proficiency with Splunk Cloud, Splunk Enterprise Security (ES), Splunk SOAR, and Splunk User Behavior Analytics (UBA)
• Demonstrated experience designing and implementing SIEM solutions, IDS/IPS, web content filtering, network forensics, firewall management
• Experience integrating SIEM and SOAR platforms with endpoint detection and response solutions, network security tools, and IT service management or ticketing systems
• Knowledge of network traffic monitoring, deep packet inspection, flow mapping, and visibility platforms such as Gigamon and ExtraHop
• Experience with secure remote access, cloud migration, load balancing, and distributed enterprise environments
• Familiarity with NIST and FedRAMP security frameworks
• Splunk Certified Architect certification is required

• Fully remote opportunity
• Ability to work remotely within the United States