Remote - Security Architect - Data Modeling (Only W2, No C2C / 1099)

The consultant will primarily focus on CRIBL data modeling, log pipeline design, and ingestion within a large-scale enterprise security environment. The successful candidate will have extensive hands-on experience designing, implementing, maintaining, and optimizing CRIBL pipelines and data models for security logging and analytics. The consultant will work closely with enterprise security architects and engineering teams to design, implement, integrate, and continuously improve security technologies and services. The role also provides technical support across multiple security disciplines, including SIEM, XDR, vulnerability management, Data Loss Prevention (DLP), endpoint security, Linux security sensors, and security automation., Design, develop, deploy, and support CRIBL data models and log ingestion pipelines in an enterprise security environment. Assist with the planning, architecture, configuration, deployment, and operational support of enterprise security platforms. Support SIEM platforms through log ingestion, data modeling, monitoring, analysis, and reporting. Assist with the design and configuration of Linux-based security sensors and endpoint monitoring tools. Support XDR, vulnerability management, DLP, endpoint security, and security awareness platforms. Collaborate with security architects to design and implement enterprise security solutions aligned with business objectives, regulatory requirements, and organizational risk tolerance. Design and deploy security controls and countermeasures to address known and emerging threats. Ensure consistent implementation of security controls across enterprise infrastructure and applications. Validate security control effectiveness and recommend improvements. Support incident detection and response through security monitoring, log analysis, investigation support, and reporting. Develop and maintain technical documentation, implementation guides, architecture documentation, and standard operating procedures. Develop automation and integrations using Python, Bash, and other scripting technologies. Support secure configuration and hardening of Linux and Windows systems. Participate in an on-call rotation to provide operational security support. Occasionally perform onsite work and local administrative tasks within SC, as needed. Perform other duties as assigned by the Department of Administration’s Division of Information Security.

Technical Skills Strong hands-on experience with CRIBL data modeling and log pipeline design/implementation. Strong understanding of enterprise security architecture and security engineering principles. Experience implementing and supporting enterprise security technologies, including: SIEM XDR Vulnerability Management Data Loss Prevention (DLP) Endpoint Security Experience developing security automation and integrations using Python and/or Bash. Strong knowledge of cybersecurity best practices, threat detection, and defensive security strategies. Experience with Linux and Windows operating systems, including system hardening and security configuration. Understanding of networking concepts, security protocols, and secure system design. Experience supporting large enterprise IT environments and/or system deployments. Education Bachelor’s degree in Information Technology, Information Security, Cybersecurity, or a related field. Eight (8) years of relevant professional experience may substitute for the educational requirement. Experience 5+ years of experience supporting large IT environments and/or system deployments is preferred. Demonstrated experience designing, implementing, and maintaining security solutions in enterprise environments. Preferred Qualifications Hands-on CRIBL data modeling experience. Hands-on SIEM administration, analysis, and reporting experience. Experience building and deploying Linux-based security sensors. Knowledge of security frameworks and compliance standards, including: NIST Cybersecurity Framework (NIST CSF) CJIS IRS 1075 CMS MARS-E CISSP certification. CompTIA Security+ certification. Mandatory Screening Requirements Candidates must satisfy the client’s mandatory screening requirements: Successful completion of a full credit check during the initial hiring process. Successful completion of a criminal background check during the initial hiring process. Once onboarded, the consultant must obtain and maintain annual CJIS certification as required. These screening and compliance requirements are strictly enforced and non-negotiable., The ideal candidate is a hands-on security engineering professional with strong CRIBL data modeling and log pipeline expertise, combined with enterprise security architecture experience. The candidate should be comfortable working across security platforms such as SIEM, XDR, vulnerability management, DLP, and endpoint security, while also possessing strong Linux/Windows, scripting, automation, and security engineering skills. Candidates with direct CRIBL implementation experience in large-scale security environments, SIEM expertise, and knowledge of NIST CSF/CJIS/IRS 1075/CMS MARS-E will be particularly relevant. Required Skills Priority Order

1. CRIBL Data Modeling and Log Pipeline Design & Implementation**
2. Enterprise Security Architecture and Engineering
3. Enterprise Security Tools SIEM, XDR, Vulnerability Management, DLP, Endpoint Security
4. Python/Bash Scripting, Automation, and Integrations
5. Cybersecurity Best Practices, Threat Detection, and Defensive Security
6. Linux and Windows Administration, Hardening, and Security Configuration
7. Networking, Security Protocols, and Secure System Design

8. Large-Scale IT Environment/System Deployment Support Preferred Skills Priority Order

9. Hands-on CRIBL Data Modeling
10. SIEM Administration, Analysis, and Reporting
11. Linux-Based Security Sensor Deployment
12. NIST CSF, CJIS, IRS 1075, and CMS MARS-E
13. CISSP and/or CompTIA Security+