Security Infrastructure Support and Data Pipeline Technical Lead

Booz Allen Hamilton•Bethesda, MD

About The Position

The Security Infrastructure Support and Data Pipeline Technical Lead role offers an opportunity to combine technical skills with big-picture thinking to make an impact on national security. The successful candidate will understand the customer’s environment and develop the right systems for their mission. This role is integral to delivering customer-focused engineering solutions by translating real-world needs into technical specifications. As a leader in systems engineering, the individual will solve complex challenges and shape infrastructure design by serving as a core member of a security infrastructure support team. This team is responsible for designing, maintaining, and enhancing enterprise-grade cybersecurity systems across Windows and Linux environments hosted in AWS. The role supports the architecture and operation of critical security platforms, including Splunk SIEM and Cribl data pipelines, while ensuring reliable data flows, system performance, and security posture. Working within an Agile deployment methodology, the architect contributes to system design, configuration, patching, server maintenance, and continuous improvement of infrastructure services. This position also participates in on-call rotations to support outage response, troubleshoot complex issues, and maintain high availability of mission-critical systems.

Requirements

10+ years of experience designing, installing, maintaining, and supporting Enterprise IT systems.
5+ years of experience at the senior engineer-level or higher.
3+ years of experience with cybersecurity tools or SIEM implementation and administration.
Experience with a hybrid infrastructure environment (on-prem and cloud).
Experience working with third-party vendors and cross-functional teams.
Experience with cloud security concepts, services, and operations (AWS, Azure, O365), including migrations, security hardening, and logging services.
Experience with CI/CD tools and DevOps practices for creating reliable and repeatable data pipelines.
Experience with federal cybersecurity compliance frameworks such as FISMA, NIST 800-53, NIST 800-92, OMB M-21-31, and CDM.
Experience with SIEM solutions, data collection tools, and log routing, filtering, and transformation tools.
Knowledge of log formats such as CEF, LEEF, JSON, and XML.
Knowledge of log normalization, data enrichment, event correlation, data governance, and the MITRE ATT&CK framework.
Ability to write complex queries using languages like Splunk or SQL.
Public Trust clearance.
Bachelor's degree in CS, IT, or Cybersecurity.

Nice To Haves

Strong scripting skills, including with JavaScript and Python, for automation and pipeline development.
Strong verbal and written communication skills, including explaining complex security concepts such as data pipelines and data dictionaries to technical and non-technical stakeholders, as well as executive-level reporting.
Strong problem-solving and analytical skills for identifying and addressing security issues and root causes.
CISSP Certification.
AWS, Azure, and GCP Certifications.
Splunk Certifications.

Responsibilities

Designing, maintaining, and enhancing enterprise-grade cybersecurity systems across Windows and Linux environments hosted in AWS.
Supporting the architecture and operation of critical security platforms, including Splunk SIEM and Cribl data pipelines.
Ensuring reliable data flows, system performance, and security posture.
Contributing to system design, configuration, patching, and server maintenance within an Agile deployment methodology.
Driving continuous improvement of infrastructure services.
Participating in on-call rotations for outage response and troubleshooting complex issues.
Maintaining high availability of mission-critical systems.