SecOps Architect

The SecOps Architect is an exciting opportunity that allows you to dig deep into the nuts and bolts of Splunk, build new functionality for Deepwatch's hosted platforms, and provide architecture improvements related to it. You will be challenged to make difficult data-driven decisions and to solve complex and unique problems utilizing a variety of skills. This position is virtual/remote working from a home office unless traveling to a corporate office.

In this role, you'll get to:

• Take an automation-first approach to manage a large-scale Splunk deployment on AWS, including configuring Splunk apps and add-ons, monitoring performance, troubleshooting issues, and platform upgrades
• Develop and maintain integrations between Splunk and other security tools and technologies, and serve as a subject matter expert on Splunk-related integrations and architectures
• Conduct performance tuning and optimization of large-scale Splunk environment, including high availability and disaster recovery configurations on EC2 and EKS
• Design and implement Splunk security best practices and procedures, including access controls, data retention policies, and audit trails
• Participate in the testing and release of new features and updates to Splunk solutions
• Optimize our cloud environment to support the Splunk infrastructure by configuring AWS services such as EC2, EKS, S3, and VPCs to ensure high availability, scalability, and security
• Develop playbooks and scripts to support the deployment and maintenance of the Splunk environment in AWS
• Participate in on-call rotation for our cloud-hosted assets
• Create documentation and training materials to help users understand and effectively use Splunk solutions

To be successful in this role, you'll need to:

• Have an extensive background in Splunk architecture, design, and optimization. Bonus points for having experience with the Splunk Operator for Kubernetes.
• Have experience with IaC (Terraform/Cloudformation)and configuration management tools (Ansible/Puppet/Chef) to provision and maintain Splunk environments
• Be familiar with version control systems, such as git
• Demonstrate a strong understanding of AWS architectures and services, and be comfortable configuring those services to support our Splunk implementation
• Manage & maintain large-scale Splunk environments
• Understand or be willing to learn Splunk Validated Architectures (SVAs)
• Problem solve, able to work independently as well as part of a team, and have excellent communication skills to interact with cross-functional teams and other stakeholders

ITAR Compliance

This position will have access to customer data and as such is subject to International Traffic in Arms Regulations (ITAR). Upon application, candidates will be asked to confirm that they are a U.S. Person as defined by the following:

• A citizen of the U.S.;
• A lawful permanent resident of the United States;
• A person admitted to the United States as a refugee; or
• A person who has been granted asylum by the United States government.

The intent of this requirement is not to verify employment eligibility overall, but to ensure compliance with import/export regulations. If you do not meet these requirements, we encourage you to apply for other open roles at Deepwatch. This information will be verified upon the offer of employment.

Statutory Pay Disclosure:

For applicants in NYC, CO, CA, RI, and WA, the salary range for this role is $120,000 to $180,000 stock options benefits. Actual compensation may vary from posted hiring range based upon geographic location, work experience, education, and/or skill level.