{bc}
Apply
greenhouse

Principal Solution Architect, AI & Data/Splunk

Iron Bow Technologies
USA
Senior · 12+ years experience
Onsite
Discovered 2 days ago
ansibleawsazuredatabricksgcpkubernetes

Full Job Posting

SKILLS

  • THAT DRIVE SUCCESS
  • 12+ years of engineering or consulting experience across security operations, IT operations, data platforms, or infrastructure in pre-sales and post-sales roles, including at least 7 years designing and deploying Splunk in enterprise or government environments
  • 12+ years of IT consulting experience supporting a diverse client base, with an emphasis on Department of War customers and complex, mission-critical environments
  • Ability to architect multivendor security, observability, and data solutions for large government and enterprise customers
  • Expert-level architecture and hands-on experience with Splunk Enterprise and Splunk Cloud Platform, including distributed deployment design, indexer and search head clustering, multisite design, sizing and performance tuning, SPL, data models, apps and add-ons, and lifecycle management
  • Strong expertise with Splunk Enterprise Security and SOAR, including risk-based alerting, detection engineering, UEBA, threat intelligence management, playbook development, and SOC workflow design
  • Strong expertise with Splunk Observability, including Observability Cloud (APM, infrastructure monitoring, RUM, and synthetics), AppDynamics, IT Service Intelligence, and OpenTelemetry instrumentation and collection
  • Experience integrating Splunk with Cisco technologies, including Cisco XDR, Secure Firewall, Secure Network Analytics, Duo, ISE, ThousandEyes, and Cisco networking telemetry
  • Working knowledge of security frameworks and federal requirements, including MITRE ATT&CK, NIST CSF, NIST SP 800-53, RMF, Zero Trust, CDM, FedRAMP, and DoD Impact Levels
  • Working knowledge of AWS, Azure, and GCP (including government regions), Kubernetes, and data platforms such as object storage, Snowflake, and Databricks as data sources and federation targets
  • Practical understanding of AI and machine learning as applied to machine data, including anomaly detection, forecasting, LLM-based assistants, agentic workflows, and AI governance
  • Scripting and automation experience with Python, REST APIs, and infrastructure-as-code tools such as Ansible and Terraform
  • Strong capacity-planning and resiliency skills across ingest volume, storage, retention, search workload, and licensing, including cost optimization and growth planning
  • Experience with technical architecture, implementation planning, project leadership, proofs of concept, and high-level and low-level design documentation, including translating mission and security requirements into Splunk specifications
  • Excellent oral and written communication skills, including executive presentations, whiteboarding, technical diagrams, proposals, spreadsheets, and slide presentations
  • Strong attention to detail, with the ability to manage multiple pursuits and projects, prioritize competing deadlines, validate technical assumptions, and follow through on commitments
  • Bachelor's degree in computer science, cybersecurity, mathematics, electrical engineering, information technology, or an equivalent technical discipline required
  • Relevant expert and vendor certifications are highly desired, including Splunk Enterprise Certified Architect, Splunk Certified Cybersecurity Defense Architect or Engineer, Splunk Enterprise Security Certified Admin, Splunk SOAR Certified Automation Developer, Splunk ITSI Certified Admin, Splunk O11y Cloud Certified Metrics User, Splunk Core Certified Consultant, CISSP, CCIE Security, and cloud certifications
  • Top Secret security clearance is highly desired
  • WHAT SETS YOU APART
  • A record of planning and leading large SIEM or observability modernizations for business- or mission-critical environments, including classified or air-gapped deployments
  • Ability to explain how architecture choices affect ingest cost, licensing, retention, detection coverage, and operations, and to turn security, mission, and operational requirements into practical Splunk designs
  • Experience building reusable reference architectures, detection content libraries, migration playbooks, lab and proof-of-concept environments, and enablement programs

Qualifications

  • THAT DRIVE SUCCESS
  • 12+ years of engineering or consulting experience across security operations, IT operations, data platforms, or infrastructure in pre-sales and post-sales roles, including at least 7 years designing and deploying Splunk in enterprise or government environments
  • 12+ years of IT consulting experience supporting a diverse client base, with an emphasis on Department of War customers and complex, mission-critical environments
  • Ability to architect multivendor security, observability, and data solutions for large government and enterprise customers
  • Expert-level architecture and hands-on experience with Splunk Enterprise and Splunk Cloud Platform, including distributed deployment design, indexer and search head clustering, multisite design, sizing and performance tuning, SPL, data models, apps and add-ons, and lifecycle management
  • Strong expertise with Splunk Enterprise Security and SOAR, including risk-based alerting, detection engineering, UEBA, threat intelligence management, playbook development, and SOC workflow design
  • Strong expertise with Splunk Observability, including Observability Cloud (APM, infrastructure monitoring, RUM, and synthetics), AppDynamics, IT Service Intelligence, and OpenTelemetry instrumentation and collection
  • Experience integrating Splunk with Cisco technologies, including Cisco XDR, Secure Firewall, Secure Network Analytics, Duo, ISE, ThousandEyes, and Cisco networking telemetry
  • Working knowledge of security frameworks and federal requirements, including MITRE ATT&CK, NIST CSF, NIST SP 800-53, RMF, Zero Trust, CDM, FedRAMP, and DoD Impact Levels
  • Working knowledge of AWS, Azure, and GCP (including government regions), Kubernetes, and data platforms such as object storage, Snowflake, and Databricks as data sources and federation targets
  • Practical understanding of AI and machine learning as applied to machine data, including anomaly detection, forecasting, LLM-based assistants, agentic workflows, and AI governance
  • Scripting and automation experience with Python, REST APIs, and infrastructure-as-code tools such as Ansible and Terraform
  • Strong capacity-planning and resiliency skills across ingest volume, storage, retention, search workload, and licensing, including cost optimization and growth planning
  • Experience with technical architecture, implementation planning, project leadership, proofs of concept, and high-level and low-level design documentation, including translating mission and security requirements into Splunk specifications
  • Excellent oral and written communication skills, including executive presentations, whiteboarding, technical diagrams, proposals, spreadsheets, and slide presentations
  • Strong attention to detail, with the ability to manage multiple pursuits and projects, prioritize competing deadlines, validate technical assumptions, and follow through on commitments
  • Bachelor's degree in computer science, cybersecurity, mathematics, electrical engineering, information technology, or an equivalent technical discipline required
  • WHAT SETS YOU APART
  • A record of planning and leading large SIEM or observability modernizations for business- or mission-critical environments, including classified or air-gapped deployments
  • Ability to explain how architecture choices affect ingest cost, licensing, retention, detection coverage, and operations, and to turn security, mission, and operational requirements into practical Splunk designs
  • Experience building reusable reference architectures, detection content libraries, migration playbooks, lab and proof-of-concept environments, and enablement programs

Preferred Qualifications

  • Relevant expert and vendor certifications are highly desired, including Splunk Enterprise Certified Architect, Splunk Certified Cybersecurity Defense Architect or Engineer, Splunk Enterprise Security Certified Admin, Splunk SOAR Certified Automation Developer, Splunk ITSI Certified Admin, Splunk O11y Cloud Certified Metrics User, Splunk Core Certified Consultant, CISSP, CCIE Security, and cloud certifications
  • Top Secret security clearance is highly desired

Apply for this job in 1 click

Skip the repetitive application forms

Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.

Sarah M.James T.Maya R.

Trusted by over 500,000 job seekers on Base Career

Start Free Today

More from this employer

More jobs at Iron Bow Technologies

Jr. IronCare Engineer- Swing Shift

, USA

Discovered 2 days ago

Linux Systems Admin

Washington, USA

Discovered 2 days ago

Jr IronCare Engineer- Weekend Shift

, USA

Discovered 2 days ago

Call Center Analyst 1

Manassas, USA

Discovered 2 days ago

Voice/Data Engineer

Washington, USA

Discovered 2 days ago

Associate Partner Alliance Manager

Herndon, USA

Discovered 3 weeks agoFull-time

Associate Cybersecurity Analyst

, USA

Discovered 1 months agoFull-time

Sr. Oracle Fusion Business Systems Analyst

, USA

Discovered 1 months agoFull-time