Cyber Engineer Architect - SIEM Security Architect

General Dynamics Information Technology, Inc.; Northern (KY); Remote; USD 120,000 - 180,000; Full time

Benefits offered by this job

Full-flex work week

401K with company match

Comprehensive health packages

Internal mobility team

Paid education and certifications

Job summary

General Dynamics Information Technology, Inc. is seeking a Cyber Engineer Architect to design and deploy advanced cybersecurity solutions, focusing on SIEM and secure cloud-edge integration.

The role requires senior-level experience across Splunk and related security tools, with a strong emphasis on risk mitigation and compliance. You will lead cross-functional efforts, mentor juniors, and coordinate with stakeholders to implement security controls aligned with NIST and FedRAMP.

Qualifications

• Bachelor's degree in Computer Engineering, Systems Engineering, or related field.
• 10+ years of IT cybersecurity infrastructure experience.
• 5+ years deploying and architecting Splunk in distributed environments.
• Splunk Certified Architect is required; additional Splunk certs are a plus.

Responsibilities

• Architect and deploy cybersecurity solutions including SIEM, IDS/IPS, web content filtering, network forensics, and firewall management.
• Lead the integration of Splunk SOAR with security tools (SIEM, Palo Alto, CrowdStrike) and ticketing (ServiceNow).
• Integrate Gigamon and ExtraHop visibility to enable deep packet inspection and toolchain optimization with Splunk.
• Collaborate with cross-functional teams to design and enforce security controls per NIST and FedRAMP.
• Troubleshoot and resolve system issues; provide escalation support for infrastructure incidents.
• Coach and mentor junior team members; communicate architecture to stakeholders.

Skills

Security architecture

Collaboration

Risk mitigation

Education

Bachelor's degree in Computer/Systems Engineering

Tools

Splunk

Splunk ES

Splunk SOAR

Splunk UBA

Palo Alto Networks

CrowdStrike

ServiceNow

Gigamon

ExtraHop

Tenable One

Job description

Cyber Engineer Architect -SIEM Security Architect

Join GDIT as a Cyber Engineer Architect where innovation meets mission-critical infrastructure. We are seeking a forward-thinking engineer with a passion for network visibility, secure access, and cloud-edge integration. In this role, you'll leverage tools like Splunk, Palo Alto Prisma Access, CrowdStrike, F5, Gigamon, and Tenable One to enhance availability, scalability, and protection of systems supporting national objectives.

HOW A CYBER ENGINEER ARCHITECT WILL MAKE AN IMPACT

• 10+ years of hands-on experience deploying and architecting cybersecurity solutions including Security Information & Event Management (SIEM), Intrusion Detection/Prevention Systems (IDS/IPS), web content filtering, network forensics, and firewall management.
• Architect and deploy solutions using Splunk and Palo Alto.
• Lead the integration of Splunk SOAR with security tools, including SIEM (Splunk), Palo Alto, EDRs (e.g., CrowdStrike), and ticketing platforms (e.g., ServiceNow).
• Integrate Gigamon and ExtraHop visibility solutions to enable deep packet inspection, flow mapping, and toolchain optimization with Splunk.
• Collaborate with cross-functional teams to design and enforce system security controls aligned with NIST and FedRAMP frameworks, to include customer Enterprise Log Management standard.
• Troubleshoot and resolve system issues and provide escalation support for infrastructure-related incidents.
• Coach and mentor junior team members, fostering communication, collaboration, and encouragement. Works independently under limited supervision.
• Convey technical and architectural information to customer and customer support towers to improve security awareness and understanding of MSS solutions.

WHAT YOU'LL NEED TO SUCCEED

• Education: Bachelor's degree in Computer Engineering, Systems Engineering, or related field.
• Required Experience: 10+ years of experience supporting complex IT cybersecurity infrastructure with a focus on risk mitigation and compliance awareness, with 5+ years experience deploying and architecting Splunk in a distributed implementation.
• Tools Proficiency: Splunk Cloud, Splunk ES, Splunk SOAR, & Splunk UBA
• Experience with secure remote access, cloud migration, load balancing, and traffic visibility platforms.
• Certifications: Required - Splunk Certified Architect; Preferred - Splunk Core Consultant, Splunk Advanced Power User, Splunk Cloud Admin, Palo Alto Networks PCNSE, , or equivalent.
• Clearance: None. The selected candidate will be subject to a security investigation.
• Location: Remote.

GDIT IS YOUR PLACE

• Full-flex work week to own your priorities
• 401K with company match
• Comprehensive health and wellness packages
• Internal mobility team dedicated to your career growth
• Professional growth opportunities including paid education and certifications
• Cutting-edge tech you can learn from
• Rest and recharge with paid vacation and holidays