Cyber Engineer Architect - SIEM Security Architect

General Dynamics Information Technology, Inc.; United States; Remote; USD 120,000 - 190,000; Full time

Benefits offered by this job

Full-flex work week

401K with company match

Comprehensive health and wellness

Internal mobility and career growth

Paid education and certifications

Cutting-edge tech exposure

Job summary

General Dynamics Information Technology, Inc. is seeking a Cyber Engineer Architect to advance secure, cloud-edge architectures.

You will deploy SIEM solutions (Splunk) and security tooling across distributed environments, focusing on visibility, resilience, and mission-critical operations for national objectives. The ideal candidate has 10+ years delivering cybersecurity infrastructure, 5+ years with Splunk in distributed deployments, and a Splunk Certified Architect.

Qualifications

• Bachelor's degree in Computer/Systems Engineering or related field.
• 10+ years in IT cybersecurity infra with risk mitigation/compliance.
• 5+ years deploying Splunk in distributed deployments.
• Splunk Certified Architect or equivalent certifications.

Responsibilities

• Architect and deploy Splunk-based solutions.
• Lead Splunk SOAR integrations with SIEM, EDR, and ServiceNow.
• Integrate Gigamon and ExtraHop visibility tools with Splunk.
• Align security controls with NIST and FedRAMP frameworks.
• Mentor junior team members and communicate with customer towers.

Skills

SIEM architecture

IDS/IPS

Firewall management

Splunk

Palo Alto

Cloud security

Security integration

Network forensics

Threat monitoring

Team leadership

Education

Bachelor's degree in Computer Engineering, Systems Engineering, or related field

Tools

Splunk Cloud

Splunk ES

Splunk SOAR

Splunk UBA

ServiceNow

CrowdStrike

Gigamon

ExtraHop

Job description

Cyber Engineer Architect -SIEM Security Architect

Join GDIT as a Cyber Engineer Architect where innovation meets mission-critical infrastructure. We are seeking a forward-thinking engineer with a passion for network visibility, secure access, and cloud-edge integration. In this role, you'll leverage tools like Splunk, Palo Alto Prisma Access, CrowdStrike, F5, Gigamon, and Tenable One to enhance availability, scalability, and protection of systems supporting national objectives.

HOW A CYBER ENGINEER ARCHITECT WILL MAKE AN IMPACT

• 10+ years of hands-on experience deploying and architecting cybersecurity solutions including Security Information & Event Management (SIEM), Intrusion Detection/Prevention Systems (IDS/IPS), web content filtering, network forensics, and firewall management.
• Architect and deploy solutions using Splunk and Palo Alto.
• Lead the integration of Splunk SOAR with security tools, including SIEM (Splunk), Palo Alto, EDRs (e.g., CrowdStrike), and ticketing platforms (e.g., ServiceNow).
• Integrate Gigamon and ExtraHop visibility solutions to enable deep packet inspection, flow mapping, and toolchain optimization with Splunk.
• Collaborate with cross-functional teams to design and enforce system security controls aligned with NIST and FedRAMP frameworks, to include customer Enterprise Log Management standard.
• Troubleshoot and resolve system issues and provide escalation support for infrastructure-related incidents.
• Coach and mentor junior team members, fostering communication, collaboration, and encouragement. Works independently under limited supervision.
• Convey technical and architectural information to customer and customer support towers to improve security awareness and understanding of MSS solutions.

WHAT YOU'LL NEED TO SUCCEED

• Education: Bachelor's degree in Computer Engineering, Systems Engineering, or related field.
• Required Experience: 10+ years of experience supporting complex IT cybersecurity infrastructure with a focus on risk mitigation and compliance awareness, with 5+ years experience deploying and architecting Splunk in a distributed implementation.
• Tools Proficiency: Splunk Cloud, Splunk ES, Splunk SOAR, & Splunk UBA
• Experience with secure remote access, cloud migration, load balancing, and traffic visibility platforms.
• Certifications: Required - Splunk Certified Architect; Preferred - Splunk Core Consultant, Splunk Advanced Power User, Splunk Cloud Admin, Palo Alto Networks PCNSE, , or equivalent.
• Clearance: None. The selected candidate will be subject to a security investigation.
• Location: Remote.

GDIT IS YOUR PLACE

• Full-flex work week to own your priorities
• 401K with company match
• Comprehensive health and wellness packages
• Internal mobility team dedicated to your career growth
• Professional growth opportunities including paid education and certifications
• Cutting-edge tech you can learn from
• Rest and recharge with paid vacation and holidays