Cyber Defense Engineering Architecture Senior Analyst

About the position

Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization. As a part of the team, you will provide ongoing engineering of the current Splunk infrastructure as well as the migration/implementation of Splunk products in a global multi-data center environment. This role also requires a forward-thinking consultative approach and a high degree of collaboration with the Splunk architecture and Infrastructure teams.

Responsibilities

• Partner with development and operations teams to develop practical automation solutions and custom modules.
• Co-lead team initiatives to continuously refine our deployment practices for improved reliability, repeatability, and security.
• Create plans and collaborate with other GEMS Engineering team members, while coordinating with development and business teams.
• Develop requirements for data ingestion methods based on input from stakeholders/leadership.
• Clearly document and diagram deployment-specific aspects of architectures and environments.
• Work closely with various teams to create application runbooks, playbooks, and knowledge base documents.
• Troubleshoot issues in production and other environments, applying debugging and problem-solving techniques.
• Suggest deployment patterns & practices improvements based on learnings from past deployments and production issues.
• Collaborate with GEMS Engineering team members to implement improvements.
• After hours on-call support occasionally required.

Requirements

• Minimum of 2 years Splunk engineering experience.
• Minimum of 1 year managing other Splunk engineers or projects.
• Strong understanding of Cloud Services - Azure, AWS.
• Strong understanding of Splunk data onboarding including Splunk App/TA configuration and CIM validation.
• Universal/Heavy Forwarder configuration experience, including encryption and compression settings.
• Experience working with a strict change control process utilizing tools such as Azure DevOps.
• Management/deployment experience with large scale/distributed Splunk environments.
• A solid understanding of Windows and Linux administration utilizing Command Line Interface (CLI).
• Knowledge of networking, firewalls, load balancers etc.
• Demonstrate understanding of common enterprise applications (especially in the area of security).
• Knowledge of best practices for IT operations in an always-on, always-available service model.

Nice-to-haves

• Experience with Cribl administration and data onboarding.
• Experience in work in large global organizations.

Benefits

• Opportunities to build new skills.
• Leadership opportunities.
• Mentorship programs.
• On-the-job learning experiences.
• Formal development programs.