Principal Solution Architect, AI & Data/Splunk

The role

Iron Bow is seeking Principal Solution Architects with deep Splunk expertise to join the CTO office's AI & Data practice. This role provides technical leadership and pre-sales support for solutions built around Splunk, with emphasis on Security, Observability, and the use of operational data to drive better visibility, insights, automation, and decision-making. The architect will help customers unlock value from machine data and telemetry across their environments, integrating Splunk with Cisco technologies and the customer's broader security, networking, cloud, infrastructure, data, and automation ecosystem.

All jobs

Principal Solution Architect, AI & Data/Splunk

Iron Bow Technologies, United States +1

Posted pay

$180K–$225K

a year

Compared with similar jobs

This base pay is below the median for principal solutions engineering jobs in other US places.

Median: $220K a year
Other jobs in the group: 30

We compare the middle of each posted range. This is base pay as posted. The group does not include this job.

Location: United States +1
Work type: Not given
Level: Principal
Experience: 12+ years
Skills in the job text: Python
AWS
Kubernetes
GCP
Azure
Terraform
Ansible
Databricks
Snowflake
Posted: 29 days ago
Last check: 1 h ago
Job type: Solutions engineering

Apply on the Iron Bow Technologies site Sign in to save

The Iron Bow Technologies site opens in a new tab.

Iron Bow Technologies

Open tech jobs: 6
With posted pay: 83%
Median posted base: $145K–$170K

About Iron Bow Technologies: funding, hiring and pay

Iron Bow Technologies

About Iron Bow Technologies: funding, hiring and pay

Interview questions

No one has reported an interview at Iron Bow Technologies yet. Did you interview there? Add the questions.

Check my fit

Compare your résumé with this job. See where you match, what is missing and which lines to change.

The role

What you need

12+ years of engineering or consulting experience across security operations, IT operations, data platforms, or infrastructure in pre-sales and post-sales roles, including at least 7 years designing and deploying Splunk in enterprise or government environments
12+ years of IT consulting experience supporting a diverse client base, with an emphasis on Department of War customers and complex, mission-critical environments
Ability to architect multivendor security, observability, and data solutions for large government and enterprise customers
Expert-level architecture and hands-on experience with Splunk Enterprise and Splunk Cloud Platform, including distributed deployment design, indexer and search head clustering, multisite design, sizing and performance tuning, SPL, data models, apps and add-ons, and lifecycle management
Strong expertise with Splunk Enterprise Security and SOAR, including risk-based alerting, detection engineering, UEBA, threat intelligence management, playbook development, and SOC workflow design
Strong expertise with Splunk Observability, including Observability Cloud (APM, infrastructure monitoring, RUM, and synthetics), AppDynamics, IT Service Intelligence, and OpenTelemetry instrumentation and collection
Experience integrating Splunk with Cisco technologies, including Cisco XDR, Secure Firewall, Secure Network Analytics, Duo, ISE, ThousandEyes, and Cisco networking telemetry
Working knowledge of security frameworks and federal requirements, including MITRE ATT&CK, NIST CSF, NIST SP 800-53, RMF, Zero Trust, CDM, FedRAMP, and DoD Impact Levels
Working knowledge of AWS, Azure, and GCP (including government regions), Kubernetes, and data platforms such as object storage, Snowflake, and Databricks as data sources and federation targets
Practical understanding of AI and machine learning as applied to machine data, including anomaly detection, forecasting, LLM-based assistants, agentic workflows, and AI governance
Scripting and automation experience with Python, REST APIs, and infrastructure-as-code tools such as Ansible and Terraform
Strong capacity-planning and resiliency skills across ingest volume, storage, retention, search workload, and licensing, including cost optimization and growth planning
Experience with technical architecture, implementation planning, project leadership, proofs of concept, and high-level and low-level design documentation, including translating mission and security requirements into Splunk specifications
Excellent oral and written communication skills, including executive presentations, whiteboarding, technical diagrams, proposals, spreadsheets, and slide presentations
Strong attention to detail, with the ability to manage multiple pursuits and projects, prioritize competing deadlines, validate technical assumptions, and follow through on commitments
Bachelor's degree in computer science, cybersecurity, mathematics, electrical engineering, information technology, or an equivalent technical discipline required
Relevant expert and vendor certifications are highly desired, including Splunk Enterprise Certified Architect, Splunk Certified Cybersecurity Defense Architect or Engineer, Splunk Enterprise Security Certified Admin, Splunk SOAR Certified Automation Developer, Splunk ITSI Certified Admin, Splunk O11y Cloud Certified Metrics User, Splunk Core Certified Consultant, CISSP, CCIE Security, and cloud certifications
US Citizenship is required and a Top Secret security clearance is highly desired

How you'll make an impact

Research and evaluate Splunk, Cisco, and adjacent security, observability, and data technologies that address customer mission and business requirements
Build relationships with Splunk and Cisco account, architecture, and product teams, as well as strategic partners across security, networking, cloud, and data
Lead customer discovery, assessments, architecture, and solution development for SIEM modernization, SOC transformation, observability, AIOps, and machine data strategy
Architect Splunk Enterprise and Splunk Cloud Platform deployments, including hybrid designs, indexer and search head clustering, multisite resiliency, capacity sizing, data retention and tiering, and federated search across cloud storage and data platforms
Design data onboarding and pipeline strategies covering source prioritization, forwarder and OpenTelemetry collection, edge and ingest processing, normalization to CIM and OCSF, data quality, and cost control
Architect security operations solutions on Splunk Enterprise Security, including risk-based alerting, detection engineering, threat intelligence, UEBA, SOAR playbooks, case management, and integration with Cisco XDR, Cisco Secure Firewall, Talos, and third-party security tools
Design observability solutions spanning Splunk Observability Cloud, AppDynamics, IT Service Intelligence, and ThousandEyes, connecting infrastructure, application, network, and digital experience telemetry to service health and mission or business impact
Apply Splunk and Cisco AI capabilities, including Splunk AI Assistant, the AI Toolkit, Model Context Protocol integrations, agentic workflows, and the Cisco Data Fabric, to anomaly detection, forecasting, triage, and automation with appropriate governance and human oversight
Architect Splunk for government and regulated environments, including FedRAMP and DoD Impact Level 5 cloud offerings, on-premises and air-gapped deployments for classified networks, and use cases supporting RMF, continuous monitoring, Zero Trust, and CMMC
Develop migration and modernization plans for customers moving from legacy SIEM, logging, or monitoring tools, or from Splunk Enterprise to Splunk Cloud Platform, covering content conversion, parallel operations, cutover, rollback, and operational handoff
Provide pre-sales support for Splunk, security, observability, and data engagements, and serve as a technical point of contact for critical customer escalations and post-sales consultations
Support RFQs, RFPs, technical proposal volumes, LOEs, bills of material, ingest and licensing models, sizing assumptions, and high-level and low-level design documentation
Develop and deliver technical proposals, whitepapers, presentations, demonstrations, workshops, reference architectures, and sales collateral
Enable sales teams, post-sales architects, engineers, and partners through reusable architecture, lab and proof-of-concept environments, and technical mentoring
Brief Iron Bow business units on Splunk and Cisco roadmaps, licensing and pricing models, support models, and customer impact

Principal Solution Architect, AI & Data/Splunk

The role

Principal Solution Architect, AI & Data/Splunk

The role

What you need

How you'll make an impact

What sets you apart

Pay and benefits

About Iron Bow Technologies

Similar jobs at other companies

Splunk Platform Architect

Splunk Security Architect - Professional Services

Principal Solutions Architect (Cloud, Infrastructure & Data)

Principal Solutions Architect, Security Specialist

Software Architect

Splunk Infrastructure Engineer

Interview questions

Iron Bow Technologies

Compared with similar jobs