Cyber Engineer Architect - SIEM Security Architect

Jobgether SRL; United States; Remote; USD 170,000 - 201,000; Full time

Benefits offered by this job

Fully remote across United States

Competitive salary

Health insurance and retirement plan

Flexible work schedule

Paid time off

Job summary

Jobgether SRL seeks an experienced Cyber Engineer Architect – SIEM Security Architect to design, deploy, and integrate advanced cybersecurity solutions across complex IT environments. The role emphasizes Splunk, SIEM, SOAR integrations, and cross‑functional collaboration for compliant, scalable security architecture.

The position is fully remote within the United States, offering a competitive salary, comprehensive benefits, and opportunities for technical leadership and mentorship in a

Qualifications

• Bachelor's degree in a technical field.
• 10+ years in complex IT cybersecurity infrastructure.
• Five+ years deploying distributed Splunk environments.
• Proficient with Splunk Cloud/ES/SOAR/UBA.
• Experience designing and implementing SIEM, IDS/IPS, web filtering and network forensics.
• Experience integrating SIEM/SOAR with EDR, network tools and ITSM.
• Knowledge of Gigamon/ExtraHop visibility platforms.
• Experience with secure remote access, cloud migration, and load balancing.
• Familiarity with NIST and FedRAMP and enterprise logging standards.
• Splunk Certified Architect is required.

Responsibilities

• Design, architect, deploy, and maintain advanced cybersecurity solutions including SIEM and IDS/IPS.
• Architect and implement distributed Splunk environments for scalable security monitoring.
• Lead integration of Splunk SOAR with SIEM platforms and security tools.
• Oversee network visibility initiatives using Gigamon and ExtraHop.
• Develop and enhance enterprise log management across distributed infrastructures.
• Collaborate on security controls aligned with standards and compliance.
• Troubleshoot complex cybersecurity and infra issues and provide escalation support.
• Support secure remote access and cloud migration efforts.
• Explain security architectures and designs to customers and teams.
• Mentor junior engineers and drive continuous improvement.

Skills

Security architecture

SIEM design

Technical leadership

Mentoring juniors

Analytical problem solving

Education

Bachelor's degree in Computer Engineering or related field

Tools

Splunk

CrowdStrike

Gigamon

ExtraHop

Palo Alto Networks

Job description

This position is listed on behalf of a partner company, which manages all applications and next steps. Our partner is looking for a Cyber Engineer Architect – SIEM Security Architect based in the United States.

The Cyber Engineer Architect – SIEM Security Architect will lead the design, deployment, and integration of advanced cybersecurity solutions that strengthen security visibility, threat detection, and incident response across complex IT environments. This role focuses on Security Information and Event Management (SIEM), security orchestration, network traffic visibility, and secure infrastructure architecture. You will leverage technologies such as Splunk, Palo Alto Networks, CrowdStrike, Gigamon, ExtraHop, and Tenable to improve system protection, scalability, and operational resilience. Working closely with cross-functional engineering and security teams, you will ensure that security controls align with established compliance frameworks and enterprise logging standards. You will also provide advanced troubleshooting, architectural guidance, and technical mentorship to support continuous improvement. This fully remote opportunity is ideal for an experienced cybersecurity professional who enjoys solving complex infrastructure challenges and contributing to mission‑critical security operations.

Accountabilities

• Cybersecurity Architecture and Deployment: Design, architect, deploy, and maintain advanced cybersecurity solutions, including SIEM platforms, intrusion detection and prevention systems (IDS/IPS), web content filtering, network forensics, and firewall management.
• Splunk Platform Engineering: Architect and implement distributed Splunk environments, optimizing log ingestion, data processing, security monitoring, scalability, and operational performance.
• Security Automation and Orchestration: Lead the integration of Splunk SOAR with SIEM platforms, Palo Alto security solutions, endpoint detection and response tools such as CrowdStrike, and ticketing systems such as ServiceNow.
• Network Visibility and Traffic Analysis: Integrate Gigamon and ExtraHop visibility solutions to support deep packet inspection, network flow mapping, enhanced threat investigation, and security toolchain optimization.
• Security Information Management: Develop and enhance enterprise log management capabilities, ensuring effective collection, correlation, analysis, and monitoring of security events across distributed infrastructure.
• Security Controls and Compliance: Collaborate with cross-functional teams to design, implement, and enforce security controls aligned with NIST, FedRAMP, and applicable enterprise log management standards.
• Infrastructure Troubleshooting: Diagnose and resolve complex cybersecurity and infrastructure issues, provide escalation support, and help restore system functionality while minimizing operational disruption.
• Secure Access and Infrastructure Integration: Support secure remote access, cloud migration, load balancing, and network visibility initiatives to strengthen the security and availability of enterprise systems.
• Technical Communication: Explain security architectures, technical designs, and operational capabilities to customers and support teams, improving understanding of managed security services and security best practices.
• Technical Leadership and Mentorship: Work independently with limited supervision while coaching junior engineers, sharing technical knowledge, and encouraging collaboration across the team.
• Continuous Improvement: Identify opportunities to improve security monitoring, automation, incident response, system availability, and the effectiveness of cybersecurity infrastructure.

Requirements

• Education: Bachelor's degree in Computer Engineering, Systems Engineering, or a related technical field.
• Professional Experience: At least 10 years of relevant experience supporting complex IT cybersecurity infrastructure, with a strong focus on risk mitigation, security architecture, and compliance.
• Splunk Architecture: At least five years of experience deploying and architecting distributed Splunk implementations.
• Splunk Expertise: Strong hands‑on proficiency with Splunk Cloud, Splunk Enterprise Security (ES), Splunk SOAR, and Splunk User Behavior Analytics (UBA).
• Cybersecurity Technologies: Demonstrated experience designing and implementing SIEM solutions, IDS/IPS, web content filtering, network forensics, firewall management, and related security infrastructure.
• Security Integration: Experience integrating SIEM and SOAR platforms with endpoint detection and response solutions, network security tools, and IT service management or ticketing systems.
• Network Visibility: Knowledge of network traffic monitoring, deep packet inspection, flow mapping, and visibility platforms such as Gigamon and ExtraHop.
• Infrastructure and Cloud Security: Experience with secure remote access, cloud migration, load balancing, and distributed enterprise environments.
• Security Standards and Compliance: Familiarity with NIST and FedRAMP security frameworks, risk mitigation practices, and enterprise logging and monitoring requirements.
• Troubleshooting and Problem‑Solving: Strong analytical skills and the ability to investigate complex infrastructure issues, resolve technical incidents, and provide escalation support.
• Communication and Leadership: Excellent technical communication skills, with the ability to explain complex architectural concepts to customers and technical stakeholders while mentoring junior colleagues.
• Professional Certification: Splunk Certified Architect certification is required.
• Preferred Certifications: Splunk Core Consultant, Splunk Advanced Power User, Splunk Cloud Admin, Palo Alto Networks Certified Network Security Engineer (PCNSE), or equivalent certifications.
• Work Arrangement: Ability to work remotely within the United States and collaborate effectively with distributed technical teams.
• Security Screening: No active security clearance is required. The selected candidate will be subject to a security investigation.

Benefits

• Annual Salary: $170,144–$201,250, depending on experience, geographic location, and applicable contractual requirements. Actual compensation may fall outside this range.
• Employment Type: Full-time position, with a standard schedule of 40 hours per week.
• Remote Work: Fully remote opportunity available across the United States.
• Flexible Work Schedule: Full-flex workweek options designed to support autonomy, productivity, and work‑life balance.
• Healthcare Coverage: Multiple medical plan options, including plans with Health Savings Accounts (HSAs), as well as dental and vision insurance.
• Retirement Benefits: 401(k) retirement plan with employer matching contributions and pre‑tax and post‑tax contribution options.
• Paid Time Off: Typically 15 days of paid leave per calendar year for eligible new employees, prorated based on the hire date.
• Paid Holidays: Typically 10 paid holidays annually, subject to applicable eligibility and proration.
• Additional Leave: Access to eligible sick, personal, military, bereavement, jury duty, and parental leave benefits.
• Paid Family Leave: Eligible employees may receive up to 160 hours of paid family leave within a rolling 12‑month period.
• Income Protection: Short‑term and long‑term disability benefits, life insurance, accidental death and dismemberment coverage, and other insurance options.
• Professional Development: Paid education, certification opportunities, and resources to expand technical expertise.
• Career Growth: Access to internal mobility opportunities and support for long‑term professional advancement.
• Advanced Technology Exposure: Opportunities to work with modern cybersecurity, cloud, network visibility, and security automation technologies.
• Travel: Less than 10% travel expected.