Azure Cloud Security Engineer (Enterprise Logging)

About DMI

DMI is a leading global provider of digital services working at the intersection of public and private sectors. With broad capabilities across IT managed services, cybersecurity, cloud migration and application development, DMI provides on-site and remote support to clients within governments, healthcare, financial services, transportation, manufacturing, and other critical infrastructure sectors. DMI has grown to over 2,100+ employees globally and has been continually recognized as a Top Workplace in both regional and national categories.

About the Opportunity

Security Cloud Engineer

DMI is currently seeking a full time Security Cloud Engineer for a Federal IT infrastructure operations contract for a high visibility Federal Government customer on a fast-paced and rewarding contract in the DC metro area. Job will focus on the O&M of cloud enterprise services (Splunk, Imperva) around a logging and security toolset in hybrid on premise and cloud environment. Candidate will be leading a team of 3 engineers in O&M tasks.



The ideal candidate must have knowledge and experience in:

• Front-End and Back-End Splunk maintenance and sustainment solutions (configuration, deployment, maintenance, etc.)
• Front-End and Back-End Imperva maintenance and sustainment solutions (configuration, deployment, maintenance, etc.)
• Experience (hands on) in how integrating any security tool in the environment effects other parts of the infrastructure in Azure (Azure Event Hubs, Loganalytics, etc.), understand Azure Security tools, what's available and how to leverage them
• Integration with SIEM with use of Splunk Cloud
• Strong expertise understanding system architecture and ability to create, modify, troubleshoot data queries through various data sources
• Knowledge of enterprise logging, including application, OS, and security technology logging
• Deep understanding of SIEM, log collection, parsing and onboarding new data sources
• Experience in working with and managing a team of engineers
• Experience with administrative tasks such as reporting, timecard management, and performance reviews
• Knowledge in Linux and Windows system administration
• Knowledge of US Government security regulations and methodologies, FISMA, FedRAMP, DoD STIG and NIST special publications

Responsibilities:

• Operations and Maintenance of automation with Splunk
• The ability to design Splunk reports and dashboards using complex data elements
• Design and customize complex search queries, and promote advanced searching and analytics
• Apply patches and upgrades to Splunk and Imperva
• Develop dashboards, data models, reports using complex data elements and optimize their performance. Develop alerts and timed reports
• License Management
• License Assignment
• License Usage
• Administer App Key value store
• Administer Forwarder Connections
• Review data ingestion and data quality
• Monitor HTTP Event Collection tokens
• Splunk training and/or certifications would be a major plus
• Ability to manage multiple assignments, changing priorities, and work with little oversight
• Use well established Enterprise standards, processes and procedures to ensure Engineering activities are delivered in a timely fashion with high quality of work product
• Manage a team of 3 engineers; assign tasks; handle reporting and other administrative duties

Desired Qualifications

• Bachelor's degree (BA/BS) from four-year college or university; or equivalent training, education, and experience
• Minimum of Ten (10) years of experience within Systems Engineering
• Minimum of Five (5) years of experience with Splunk on a large enterprise level (to include installation, configuration, administration and troubleshooting)
• Minimum of Five (5) years of experience working with data analytics
• Ability to maintain deep technical knowledge within areas of expertise
• Ability to explain technical concepts and adjust messaging based on the audience, including non-technical groups
• Ability to influence through outstanding interpersonal skills, collaboration, and negotiation skills
• Familiarity with ITIL or another IT service management framework

Current Splunk Enterprise Certified Admin certification a plus

Qualifications

Location: Arlington, VA/Hybrid

Physical Requirements: N/A

ship Required

Working at DMI

DMI is a diverse, prosperous, and rewarding place to work. Being part of the DMI family means we care about your wellbeing. We offer a variety of perks and benefits that help meet various interests and needs, while still having the opportunity to work directly with a number of our award-winning, Fortune 1000 clients. The following categories make up your DMI wellbeing:

• Convenience/Concierge - Virtual visits through health insurance, pet insurance, commuter benefits, discount tickets for movies, travel, and many other items to provide convenience.
• Development - Annual performance management, continuing education, and tuition assistance, internal job opportunities along with career enrichment and advancement to help each employee with their professional and personal development.
• Financial - Generous 401k matches both pre-tax and post-tax (ROTH) contributions along with financial wellness education, EAP, Life Insurance and Disability help provide financial stability for each DMI employee.
• Recognition - Great achievements do not go unnoticed by DMI through Annual Awards ceremony, service anniversaries, peer-to-peer acknowledgment, employee referral bonuses.
• Wellness - Healthcare benefits, Wellness programs, Flu Shots, Biometric screenings, and several other wellness options.

Employees are valued for their talents and contributions. We all take pride in helping our customers achieve their goals, which in turn contributes to the overall success of the company. The company does and will take affirmative action to employ and advance in employment individuals with disabilities and protected veterans, and to treat qualified individuals without discrimination based on their physical or mental disability or veteran status. DMI is an Equal Opportunity Employer Minority/Female/Veterans/Disability. DMI maintains a drug-free workplace.

#LI-JS1

#LI-JS3

***************** No Agencies Please *****************

Applicants selected may be subject to a government security investigation and must meet eligibility requirements for access to classified information. ship may be required for some positions.