Splunk Security Architect

Sanderson Government & Defence; London; Hybrid; GBP 125,000 - 150,000; Full time

Job summary

A leading company is seeking a Splunk Security Architect to oversee the design, configuration, and deployment of Splunk solutions critical for national infrastructure. The ideal candidate will possess strong SIEM engineering skills, AWS expertise, and active SC Clearance to effectively contribute to security improvements within a government context.

Benefits

Support for diverse applicants

Qualifications

• End-to-end delivery lifecycle experience for Splunk SaaS improvements.
• Active SC Clearance required.
• Experience with SIEM improvements within Cyber Security Operations Centre.

Responsibilities

• Lead design, configuration, and deployment of Splunk across critical infrastructure.
• Produce architecture diagrams and design documents.
• Configuration of AWS infrastructure including EC2 and S3.

Skills

SIEM Engineering

AWS Infrastructure

Communication

Documentation

Presentation

Job description

Splunk Security Architect
Clearance Required: SC

Location: Ruskin Square, London (Hybrid)Rate: Up to £800 per day Umbrella
Contract Length: 9 Months Role details:We're partnering with a high-profile central government department. They are looking for a Splunk Security Architect to lead the design, configuration, and deployment of Splunk across critical national infrastructure and cloud environments, producing detailed architectural documentation and representing the project in key technical forums, workshops, and governance boards. Responsibilities:Produce Architecture diagrams, high level and low-level design documents.Configuration of Splunk with use cases in line with CSOC standards.Configuration of Splunk as part of onboarding CNI and all other systems.Configuration of all infrastructure including AWS - EC2, S3 buckets, SQS queues etc.Attend technical workshops, represent the project at key meetings such as the ADF, TDAs etc.Represent the project across all technical discussions relating to Splunk, Onboarding, SOAR, Attack Analyzer etc. Essential Requirements:SIEM Engineering and Architecture skills, specifically in Splunk SaaS.Full end to end experience of delivery lifecycle experience for improvements to Splunk SaaS.Experience of defining improvements within Cyber departments, particularly, SIEM improvements within Cyber Security Operations Centre (CSOC) functions that result in an increase in SIEM Maturity Levels.Good communication, reporting, documentation and presentational skills.AWS Infrastructure skills for the configuration of EC2 servers, S3 buckets etc. Desirable:Public Sector experience.Experience with wider SIEM Solutions.Experience with multiple Cyber Security related technologies Eligibility:To be considered for the role, you must have active SC Clearance.

Reasonable Adjustments:

Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.

If you need any help or adjustments during the recruitment process for any reason, please let us know when you apply or talk to the recruiters directly so we can support you.