Principal Solution Architect, AI & Data/Splunk
- Discuss this with your agent
- Open in Claude
- Open in ChatGPT
Prepare application
- Draft this with your agent
- Open in Claude
- Open in ChatGPT
Role details
Tech stack
+38 more
Job description
Iron Bow is seeking Principal Solution Architects with deep Splunk expertise to join the CTO office’s AI & Data practice. This role provides technical leadership and pre-sales support for solutions built around Splunk, with emphasis on Security, Observability, and the use of operational data to drive better visibility, insights, automation, and decision-making. The architect will help customers unlock value from machine data and telemetry across their environments, integrating Splunk with Cisco technologies and the customer’s broader security, networking, cloud, infrastructure, data, and automation ecosystem. Key technologies include Splunk Enterprise and Splunk Cloud Platform, Splunk Enterprise Security and SOAR, Splunk Observability Cloud, AppDynamics, IT Service Intelligence, the Cisco Data Fabric, and Iron Bow’s strategic partner technologies and services., * Research and evaluate Splunk, Cisco, and adjacent security, observability, and data technologies that address customer mission and business requirements
- Build relationships with Splunk and Cisco account, architecture, and product teams, as well as strategic partners across security, networking, cloud, and data
- Lead customer discovery, assessments, architecture, and solution development for SIEM modernization, SOC transformation, observability, AIOps, and machine data strategy
- Architect Splunk Enterprise and Splunk Cloud Platform deployments, including hybrid designs, indexer and search head clustering, multisite resiliency, capacity sizing, data retention and tiering, and federated search across cloud storage and data platforms
- Design data onboarding and pipeline strategies covering source prioritization, forwarder and OpenTelemetry collection, edge and ingest processing, normalization to CIM and OCSF, data quality, and cost control
- Architect security operations solutions on Splunk Enterprise Security, including risk-based alerting, detection engineering, threat intelligence, UEBA, SOAR playbooks, case management, and integration with Cisco XDR, Cisco Secure Firewall, Talos, and third-party security tools
- Design observability solutions spanning Splunk Observability Cloud, AppDynamics, IT Service Intelligence, and ThousandEyes, connecting infrastructure, application, network, and digital experience telemetry to service health and mission or business impact
- Apply Splunk and Cisco AI capabilities, including Splunk AI Assistant, the AI Toolkit, Model Context Protocol integrations, agentic workflows, and the Cisco Data Fabric, to anomaly detection, forecasting, triage, and automation with appropriate governance and human oversight
- Architect Splunk for government and regulated environments, including FedRAMP and DoD Impact Level 5 cloud offerings, on-premises and air-gapped deployments for classified networks, and use cases supporting RMF, continuous monitoring, Zero Trust, and CMMC
- Develop migration and modernization plans for customers moving from legacy SIEM, logging, or monitoring tools, or from Splunk Enterprise to Splunk Cloud Platform, covering content conversion, parallel operations, cutover, rollback, and operational handoff
- Provide pre-sales support for Splunk, security, observability, and data engagements, and serve as a technical point of contact for critical customer escalations and post-sales consultations
- Support RFQs, RFPs, technical proposal volumes, LOEs, bills of material, ingest and licensing models, sizing assumptions, and high-level and low-level design documentation
- Develop and deliver technical proposals, whitepapers, presentations, demonstrations, workshops, reference architectures, and sales collateral
- Enable sales teams, post-sales architects, engineers, and partners through reusable architecture, lab and proof-of-concept environments, and technical mentoring
- Brief Iron Bow business units on Splunk and Cisco roadmaps, licensing and pricing models, support models, and customer impact
Requirements
- 12+ years of engineering or consulting experience across security operations, IT operations, data platforms, or infrastructure in pre-sales and post-sales roles, including at least 7 years designing and deploying Splunk in enterprise or government environments
- 12+ years of IT consulting experience supporting a diverse client base, with an emphasis on Department of War customers and complex, mission-critical environments
- Ability to architect multivendor security, observability, and data solutions for large government and enterprise customers
- Expert-level architecture and hands-on experience with Splunk Enterprise and Splunk Cloud Platform, including distributed deployment design, indexer and search head clustering, multisite design, sizing and performance tuning, SPL, data models, apps and add-ons, and lifecycle management
- Strong expertise with Splunk Enterprise Security and SOAR, including risk-based alerting, detection engineering, UEBA, threat intelligence management, playbook development, and SOC workflow design
- Strong expertise with Splunk Observability, including Observability Cloud (APM, infrastructure monitoring, RUM, and synthetics), AppDynamics, IT Service Intelligence, and OpenTelemetry instrumentation and collection
- Experience integrating Splunk with Cisco technologies, including Cisco XDR, Secure Firewall, Secure Network Analytics, Duo, ISE, ThousandEyes, and Cisco networking telemetry
- Working knowledge of security frameworks and federal requirements, including MITRE ATT&CK, NIST CSF, NIST SP 800-53, RMF, Zero Trust, CDM, FedRAMP, and DoD Impact Levels
- Working knowledge of AWS, Azure, and GCP (including government regions), Kubernetes, and data platforms such as object storage, Snowflake, and Databricks as data sources and federation targets
- Practical understanding of AI and machine learning as applied to machine data, including anomaly detection, forecasting, LLM-based assistants, agentic workflows, and AI governance
- Scripting and automation experience with Python, REST APIs, and infrastructure-as-code tools such as Ansible and Terraform
- Strong capacity-planning and resiliency skills across ingest volume, storage, retention, search workload, and licensing, including cost optimization and growth planning
- Experience with technical architecture, implementation planning, project leadership, proofs of concept, and high-level and low-level design documentation, including translating mission and security requirements into Splunk specifications
- Excellent oral and written communication skills, including executive presentations, whiteboarding, technical diagrams, proposals, spreadsheets, and slide presentations
- Strong attention to detail, with the ability to manage multiple pursuits and projects, prioritize competing deadlines, validate technical assumptions, and follow through on commitments
- Bachelor’s degree in computer science, cybersecurity, mathematics, electrical engineering, information technology, or an equivalent technical discipline required
- Relevant expert and vendor certifications are highly desired, including Splunk Enterprise Certified Architect, Splunk Certified Cybersecurity Defense Architect or Engineer, Splunk Enterprise Security Certified Admin, Splunk SOAR Certified Automation Developer, Splunk ITSI Certified Admin, Splunk O11y Cloud Certified Metrics User, Splunk Core Certified Consultant, CISSP, CCIE Security, and cloud certifications
- Top Secret security clearance is highly desired, * A record of planning and leading large SIEM or observability modernizations for business- or mission-critical environments, including classified or air-gapped deployments
- Ability to explain how architecture choices affect ingest cost, licensing, retention, detection coverage, and operations, and to turn security, mission, and operational requirements into practical Splunk designs
- Experience building reusable reference architectures, detection content libraries, migration playbooks, lab and proof-of-concept environments, and enablement programs
TRAVEL REQUIREMENTS: Candidates must reside in a reasonable commuting distance to the VA/MD/DC metropolitan area, with up to 33% travel required
Benefits & conditions
Posted Yesterday Remote Hiring Remotely in United States 180K-225K Annually Expert/Leader Remote Hiring Remotely in United States 180K-225K Annually Expert/Leader Provides technical leadership and pre-sales architecture for Splunk, Cisco, security operations, observability, AI, and data solutions. Leads customer discovery, SIEM and SOC modernization, Splunk deployments, data onboarding, detection engineering, SOAR, observability, cloud and regulated-environment architectures, migrations, proposals, demonstrations, and technical enablement. Supports government and enterprise customers, including classified and air-gapped environments. The summary above was generated by AI, The initial base salary range for this position is $180,000 - $225,000. In addition to base salary, this role offers a competitive on-target earnings (OTE) structure, with strong upside potential. Our compensation plans are designed to reward success, drive growth, and recognize the impact our sales teams make in the market.
At Iron Bow, we invest in our people and their success. We offer a comprehensive benefits package that may include medical, dental, and vision coverage, a 401(k) plan, paid time off, and additional wellness and financial benefits. An overview of our benefits is available on our careers page., Remote or Hybrid United States 145K-196K Annually Senior level 145K-196K Annually Senior level Artificial Intelligence * Cloud * Information Technology * Sales * Security * Software * Cybersecurity Manage and mentor Product Managers while guiding product strategy, prioritization, roadmap execution, and lifecycle management for Rapid7’s cybersecurity platform. Partner with Product, Engineering, UX, executives, customers, and cloud ecosystem partners to define requirements, launch features, analyze usage and feedback, and drive market impact. The role also promotes AI-enabled product management practices, customer-centric decision-making, cross-functional alignment, and development of high-performing global teams., Remote or Hybrid CA, USA 259K-351K Annually Expert/Leader 259K-351K Annually Expert/Leader Artificial Intelligence * Cloud * Information Technology * Sales * Security * Software * Cybersecurity Own the strategy, vision, roadmap, and execution of Rapid7’s Managed Detection and Response product portfolio. Lead and develop a global product management team, partner with SOC and engineering leaders, translate customer and market insights into product decisions, define platform capabilities, and drive product OKRs. Serve as a senior customer-facing representative while collaborating with sales, marketing, and customer success on positioning, launches, adoption, retention, and expansion. Top Skills: CybersecurityDetection And Response PlatformsIncident ResponseManaged Detection And Response (Mdr)Saas PlatformsSecurity Operations Center (Soc) Shield AI
Capture Manager
3 Hours Ago In-Office or Remote 230K-350K Annually Expert/Leader 230K-350K Annually Expert/Leader Aerospace * Artificial Intelligence * Machine Learning * Robotics * Software * Defense Technology Leads Shield AI’s strategic autonomy capture strategy for PACOM, developing multi-year capture plans, building relationships with requirements and acquisition officials, and influencing defense policy, requirements, and solicitations. The role coordinates technical and operational teams to secure strategic program wins and expand long-term revenue and mission impact across autonomy product portfolios. Top Skills: Artificial IntelligenceAutonomy SoftwareSynthetic Reality Technologies
What you need to know about the Colorado Tech Scene
With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.
Key Facts About Colorado Tech
- Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
- Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
- Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
- Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
- Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute
About the company
Iron Bow Technologies is for people who believe trust is paramount, transformation is embraced, and the future is here, because “What we do matters!”
We are a next generation solutions provider, delivering mission success across government, healthcare, and commercial industries. Iron Bow relies on our passionate people, long standing partnerships, and strategic thinking to solve your most critical challenges.
Whether we team with clients, colleagues, or partners, we put each other first. It’s The Iron Bow Way., The Iron Bow CTO office develops new ideas and brings them to market for customers and strategic OEM partners. The team includes experienced pre-sales architects and recognized thought leaders who influence products and solutions across several markets. This role will help shape Iron Bow’s growing AI & Data practice and its Splunk and Cisco offerings.
Apply for this position
This job is hosted externally. Click below to view the full posting and apply.
Prepare application
- Draft this with your agent
- Open in Claude
- Open in ChatGPT
Good distractions
Loading talks and stories from around this role…