Security Data Platform Architect for Cloud & SIEM

Phase2 Technology; Reston (VA); On-site; USD 86,800 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking a Cyber Data Platform Architect to shape data architecture across cloud, on-prem, and disaggregated environments. You will lead the design of data architectures and collaborate with analysts and tech teams to deliver advanced data solutions.

Ideal candidates bring 8+ years in defensive cyber ops, 5+ years designing security pipelines, and 3+ years with SIEMs and data tools. TS/SCI clearance is required.

Qualifications

• 8+ years in defensive cyber operations or security platform architecture.
• 5+ years designing security data pipelines (log collection, normalization, enrichment, routing).
• 3+ years with SIEM platforms (Splunk ES, Elastic Security, Microsoft Sentinel, Chronicle) and data tools (Cribl, Kafka, Logstash, Fluentd).
• Experience deploying platforms across cloud, on-prem and disconnected environments using Kubernetes/OpenShift.
• Knowledge of Zero Trust and DoD/IC cybersecurity frameworks; TS/SCI clearance.

Responsibilities

• Lead the design of data architecture solutions for cloud computing, managed services, and service-oriented architectures.
• Resolve data-architecture issues with business analysts and technology teams; advise on future development.
• Analyze data architecture-related business needs and drive innovative data solutions.

Skills

Defensive cyber ops

Security data pipelines

SIEM platforms

Threat hunting workflows

Cloud/on-prem/disconnected

Zero Trust / DoD IC frameworks

TS/SCI clearance

Kubernetes

Education

HS diploma or GED

Tools

Cribl

Apache Kafka

Logstash

Fluentd

Kubernetes

RedHat OpenShift

Job description

Booz Allen Hamilton is seeking a Cyber Data Platform Architect to shape data architecture across cloud, on-prem, and disaggregated environments. You will lead the design of data architectures and collaborate with analysts and tech teams to deliver advanced data solutions.

Ideal candidates bring 8+ years in defensive cyber ops, 5+ years designing security pipelines, and 3+ years with SIEMs and data tools. TS/SCI clearance is required.