Security Architect - Consultant - Data Modeling Engineer

The Department of Administration’s Division of Information Security is seeking a Security Architect - Consultant - Data Modeling Engineer with strong hands-on experience in Cribl data modeling and log pipeline ingestion.

The consultant will support a large enterprise security team in designing, implementing, maintaining, and optimizing Cribl pipelines and data models. The role will also provide technical support across SIEM, XDR, vulnerability management, DLP, endpoint security, Linux security sensors, and security automation initiatives., * Design, develop, deploy, and maintain Cribl data models and log ingestion pipelines.

• Plan, configure, and provide operational support for enterprise SIEM platforms.
• Assist with Linux-based security sensor and endpoint monitoring deployments.
• Support XDR, vulnerability management, DLP, and security awareness platforms.
• Collaborate with security architects to design enterprise security solutions aligned with business, regulatory, and security requirements.
• Develop and implement security controls and countermeasures to address known and emerging threats.
• Validate security controls and recommend improvements.
• Support incident detection and response through security monitoring, log analysis, and reporting.
• Develop automation and integrations using Python, Bash, or similar scripting languages.
• Work with Linux and Windows environments, including security hardening and configuration.
• Create technical documentation, implementation guides, and standard operating procedures.
• Provide hands-on technical support across multiple information security disciplines.
• Participate in an on-call rotation.

1. Strong hands-on Cribl data modeling and log pipeline design/implementation experience.
2. Strong understanding of enterprise security architecture and engineering principles.
3. Experience with enterprise security tools such as: + SIEM + XDR + Vulnerability Management + DLP + Endpoint Security
4. Experience developing security automation and integrations using Python and/or Bash.
5. Strong knowledge of cybersecurity best practices, threat detection, and defensive security strategies.
6. Experience with Linux and Windows operating systems, including hardening and security configuration.
7. Understanding of networking concepts, security protocols, and secure system design.

Preferred Skills

• Hands-on Cribl data modeling experience.
• SIEM administration, analysis, and reporting.
• Experience deploying and supporting Linux-based security sensors.

• Knowledge of security frameworks and compliance standards, including:

• NIST CSF
• CJIS
• IRS 1075
• CMS MARS-E, * Bachelor’s degree in Information Technology, Information Security, or a related field.
• 8 years of relevant work experience may substitute for the degree.
• Minimum 5 years of experience supporting large IT environments and/or system deployments.
• Preferred certifications: CISSP, Security+.