Security Infrastructure Support and Data Pipeline Technical Lead

Booz Allen Hamilton•Bethesda, MD

9d•$99,000 - $225,000•Remote

About The Position

This role offers an opportunity to combine technical skills with big-picture thinking to make an impact on national security. The successful candidate will understand the customer’s environment and develop the right systems for their mission. The ability to translate real-world needs into technical specifications is crucial for delivering a customer-focused engineering solution. As a leader in systems engineering, this position will solve complex challenges and shape infrastructure design by serving as a core member of a security infrastructure support team. This team is responsible for designing, maintaining, and enhancing enterprise-grade cybersecurity systems across Windows and Linux environments hosted in AWS. The role supports the architecture and operation of critical security platforms, including Splunk SIEM and Cribl data pipelines, while ensuring reliable data flows, system performance, and security posture. Working within an Agile deployment methodology, the architect will contribute to system design, configuration, patching, server maintenance, and continuous improvement of infrastructure services. This position also participates in on-call rotations to support outage response, troubleshoot complex issues, and maintain high availability of mission-critical systems.

Requirements

10+ years of experience designing, installing, maintaining, and supporting Enterprise IT systems
5+ years of experience at the senior engineer-level or higher
3+ years of experience with cybersecurity tools or SIEM implementation and administration
Experience with a hybrid infrastructure environment, both on-prem and cloud, and working with third-party vendors and cross-functional teams
Experience with cloud security concepts, services, and operations such as AWS, Azure, and O365, including migrations, security hardening, and logging services
Experience with CI/CD tools and DevOps practices for creating reliable and repeatable data pipelines
Experience with federal cybersecurity compliance frameworks such as FISMA, NIST 800-53, NIST 800-92, OMB M-21-31, and CDM
Experience with SIEM solutions, data collection tools, and log routing, filtering, and transformation tools
Knowledge of log formats such as CEF, LEEF, JSON, and XML, log normalization, data enrichment, event correlation, data governance, and the MITRE ATT&CK framework
Ability to write complex queries using languages like Splunk or SQL
Public Trust clearance required
Bachelor's degree in CS, IT, or Cybersecurity

Nice To Haves

Strong scripting skills, including with JavaScript and Python, for automation and pipeline development
Strong verbal and written communication skills, including explaining complex security concepts such as data pipelines and data dictionaries to technical and non-technical stakeholders, as well as executive-level reporting
Strong problem-solving and analytical skills, for identifying and addressing security issues and root causes
CISSP Certification
AWS, Azure, and GCP Certifications
Splunk Certifications

Responsibilities

Designing, maintaining, and enhancing enterprise-grade cybersecurity systems across Windows and Linux environments hosted in AWS.
Supporting the architecture and operation of critical security platforms, including Splunk SIEM and Cribl data pipelines.
Ensuring reliable data flows, system performance, and security posture.
Contributing to system design, configuration, patching, server maintenance, and continuous improvement of infrastructure services within an Agile deployment methodology.
Participating in on-call rotations for outage response, troubleshooting complex issues, and maintaining high availability of mission-critical systems.