Security Infrastructure Support Team Lead

Booz Allen Hamilton•Bethesda, MD

3d•$99,000 - $225,000•Remote

About The Position

The Security Infrastructure Support Team Lead will serve as a core member of an infrastructure support team responsible for designing, maintaining, and enhancing enterprise‑grade cybersecurity systems across Windows and Linux environments hosted in AWS. The role supports the architecture and operation of critical security platforms, such as Splunk SIEM and Cribl data pipelines, while ensuring reliable data flows, system performance, and security posture. Working within an agile deployment methodology, the architect contributes to system design, configuration, patching, server maintenance, and continuous improvement of infrastructure services. This position also participates in on‑call rotations to support outage response, troubleshoot complex issues, and maintain high availability of mission‑critical systems.

Requirements

10+ years of experience with an IT lead or management role in security engineering
Experience with overseeing a hybrid infrastructure including on-prem and cloud environment
Experience with cloud security concepts, services, and operations such as AWS, Azure, or O365 including migration, security hardening, and cost optimization
Experience with DevSecOps practices including secure code and automation is incorporated into the build, test, and deployment process for security operations
Experience with federal cybersecurity compliance frameworks, such as FISMA, NIST 800-53, NIST 800-92, OMB M-21-31, or CDM, and managing a variety of enterprise cybersecurity tools including Security Information and Event Management (SIEM) platforms across a hybrid environment
Experience engaging with Federal leadership, Cybersecurity Operations Centers (CSOC), and compliance offices
Ability to lead technical teams, manage projects, technical risk analysis, and provide technical guidance and explain complex security concepts to technical and non-technical stakeholders as well as executive-level reporting
Public Trust
HS diploma or GED
PMP Certification

Nice To Haves

Experience architecting or supporting Splunk Enterprise, including indexer or search head management, data onboarding, and performance tuning
Experience designing or managing Cribl data flows, pipelines, routing, and log optimization
Experience in infrastructure management including Windows or Linux servers, patching, vulnerability remediation, network appliances, and endpoint security
Experience with infrastructure as code, automation, or configuration management tools such as Terraform, Ansible, or CloudFormation
Experience with containerization and orchestration technologies such as Docker or Kubernetes
Experience supporting high availability architectures, redundancy strategies, and disaster recovery planning
Knowledge of networking fundamentals, including routing, firewalls, load balancing, and secure connectivity
Knowledge of identity and access management, secure configuration baselines, and infrastructure security best practices
Possession of strong verbal and written communication skills

Responsibilities

Designing, maintaining, and enhancing enterprise‑grade cybersecurity systems across Windows and Linux environments hosted in AWS.
Supporting the architecture and operation of critical security platforms, such as Splunk SIEM and Cribl data pipelines.
Ensuring reliable data flows, system performance, and security posture.
Contributing to system design, configuration, patching, server maintenance, and continuous improvement of infrastructure services within an agile deployment methodology.
Participating in on‑call rotations to support outage response, troubleshoot complex issues, and maintain high availability of mission‑critical systems.
Leading technical teams, managing projects, conducting technical risk analysis, and providing technical guidance.
Explaining complex security concepts to technical and non-technical stakeholders as well as executive-level reporting.