Data Integration Architect (100% Remote)

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: None

Employee Type: Regular

Percentage of Travel Required: None

Type of Travel: None

CACI is seeking a Data Integration Architect to support a complex data modeling position supporting cybersecurity data collection, analysis, and mitigation. The work will initially include support for cybersecurity-related projects for that encompass automated event identification and incident response, new cybersecurity implementation into a Splunk data-lake. The architect will also be responsible for analysis of data derived from cybersecurity tools and use the results of that analysis towards developing enhanced and automated query mechanisms and architecture concepts, and preparation of presentation materials for Government managers. The architect will also work with the Integration Layer Architecture Product Owner to develop an approach for expanding the scope of the existing data integration layer to accommodate data from an expanded set of data sources, as a part of a future solution deployment.

What You’ll Get to Do:

• Engineer, implement and monitor Splunk security measures for the protection of computer systems, networks, and information
• Identify and define system data collection requirements
• Design computer security architecture and develop detailed cyber security designs using Splunk or other similar tools with breakthrough technology solutions
• Prepare and document standard operating procedures and protocols for all designed and developed solutions that ensures detailed project documentation
• Develop technical solutions and investigate new security tools to help mitigate security vulnerabilities and automate repeatable reports using Splunk data-lake or other similar tools
• Develop query mechanisms using Splunk within hours of receiving a data request
• Deploy Splunk into virtual and cloud environments (AWS and Azure)
• Write comprehensive reports including assessment-based findings, outcomes, and propositions for further system security enhancement

You’ll Bring These Qualifications:

• US Citizenship required
• There is no clearance requirement to begin employment. However, as a requirement of continued employment, you must meet eligibility requirements for access to classified information and be clearable to a Department of Homeland Security (DHS) Entrance on Duty (EOD) authorization.
• Proven work experience as a Splunk system security architect with a Splunk Enterprise Certified Architect certification
• Experience in building and maintaining data integration and processing systems that receive data feeds from multiple disparate data sources
• Detailed technical knowledge of database and operating system security using Splunk attributes
• Hands on experience with Splunk collecting cybersecurity data metrics from firewalls, intrusion detection systems, anti-virus software, vulnerability scanners, authentication systems, log management, content filtering, etc.
• Knowledge of the implementation of attribute-based access control (ABAC) and role-based access control (RBAC) triggers for Splunk
• Applied hands-on knowledge of the use of Splunk with two or more of the following toolsets: Axonius, Forescout, McAfee ePO, RedHat Enterprise Linux (RHEL and RHEL KVM), ServiceNow, Tanium, VMWare, Windows Server, Tenable, CrowdStrike
• Understanding and experience working with high availability systems and proper protection of HA systems when pulling data
• Knowledge of network design and network devices: Cisco, F5, Juniper, and Palo Alto with knowledge of applicable API integration
• Experience with network security and networking technologies and with system, security, and network monitoring tools
• Thorough understanding of the latest security principles, techniques, and protocols
• Familiarity with web related technologies (Web applications, Web Services, Service Oriented Architectures) and of network/web related protocols
• Problem solving skills and ability to work under pressure
• BS degree in Computer Science or related field

These Qualifications Would be Nice to Have:

• Any other cybersecurity certification such as Security+, CEH, or CISSP
• Any other relevant certification on tools used for large scale data integration and processing
• Knowledge / experience of Machine Learning

What We Can Offer You:

• We’ve been named a Best Place to Work by the Washington Post.
• Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives.
• We offer competitive benefits and learning and development opportunities.
• We are mission-oriented and ever vigilant in aligning our solutions with the nation’s highest priorities.
• For over 55 years, the principles of CACI’s unique, character-based culture have been the driving force behind our success.

Company Overview: At CACI, you will have the opportunity to make an immediate impact by providing information solutions and services in support of national security missions and government transformation for Intelligence, Defense, and Federal Civilian customers. CACI is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other protected characteristic.