Engagement Architect | Security Intelligence and Observability - Trace3 Chicago, Illinois, United States Bookmark Share Print 154 0 0

Listing Description

Who is Trace3?

Trace3 is a leading Transformative IT Authority, providing unique technology solutions and consulting services to our clients. Equipped with elite engineering and dynamic innovation, we empower IT executives and their organizations to achieve competitive advantage through a process of Integrate, Automate, Innovate.

Our culture at Trace3 embodies the spirit of a startup with the advantage of a scalable business. Employees can grow their career and have fun while doing it!

Trace3 is headquartered in Irvine, California. We employ more than 1,000 people all over the United States. Our major field office locations include Atlanta, Denver, Detroit, Indianapolis, Grand Rapids, Lexington, Los Angeles, Louisville, Texas, San Diego, San Francisco, and Scottsdale.  

Ready to discover the possibilities that live in technology?


Come Join Us!

Street-Smart Thriving in Dynamic Times

We are flexible and resilient in a fast-changing environment. We continuously innovate and drive constructive change while keeping a focus on the “big picture.” We exercise sound business judgment in making high-quality decisions in a timely and cost-effective manner. We are highly creative and can dig deep within ourselves to find positive solutions to different problems.

Juice - The “Stuff” it takes to be a Needle Mover

We get things done and drive results. We lead without a title, empowering others through a can-do attitude. We look forward to the goal, mentally mapping out every checkpoint on the pathway to success, and visualizing what the final destination looks and feels like.

Teamwork - Humble, Hungry and Smart

We are humble individuals who understand how our job impacts the company's mission. We treat others with respect, admit mistakes, give credit where it’s due and demonstrate transparency. We “bring the weather” by exhibiting positive leadership and solution-focused thinking. We hug people in their trials, struggles, and failures – not just their success. We appreciate the individuality of the people around us.


About the Role:

The Engagement Architect will be responsible for providing technical expertise in the creation and delivery of data analytics solutions designed to meet customer’s needs in areas such as Security Incident and Event Management, Data Access Activity and Auditing, and Threat Detection. While leading in a delivery capacity, the Engagement Architect will be responsible for leveraging technologies such as Splunk, Elastic Search, and Cribl to solve key technical challenges for clients. Some key functions of this role will be data curation and engineering, leveraging machine learning to help solve complex data analytics problems, alert creation and actions, reporting, dashboards and other visualizations to convey the results of the data analysis to different people based on their level of understanding of the data set.

What You’ll Do:

  • Responsible for direct, client facing, enablement of product and services with a target billable utilization target. 

  • Leverage the collateral repository and custom tune any templates to develop Level of Effort estimates for new opportunities.

  • Understand each client’s unique environment, success criteria, and personalities to deliver a highly customized technical solution which resonates and demonstrates Company’s commitment to excellence.

  • Operate as domain (go-to) expert in Splunk, Elastic Search and Cribl for each set of specific technologies and client outcomes.

  • For individually aligned service engagements, serve as primary PoC for all client communication, strategic discussions, final reviewer on all delivered client facing collateral, and regular/weekly reports.

  • Direct oversight of all Sr. Engineers and Engineers (pre-sales and post sales) for an engagement to ensure that team members are operating effectively and when appropriate, escalating to PSA and PD for resolution of issues.

  • Architect, design, support, and maintain Splunk, Elastic Search and Cribl infrastructure

  • Standardize Splunk, Elastic Search and Cribl agent deployment, configuration and maintenance across a variety of UNIX and Windows platforms

  • Troubleshoot Splunk, Elastic Search and Cribl server and agent problems and issues

  • Assist internal users of Splunk, Elastic Search and Cribl in designing and maintaining production-quality dashboards

  • Monitor the agent and server infrastructure for capacity planning and optimization

  • Design core systems performance and troubleshooting logs

  • Support Splunk, Elastic Search and Cribl on Unix, Linux and Windows-based platforms

  • Perform data mining and analysis in Splunk, Elastic Search and Cribl, utilizing various queries and reporting methods

  • Solve complex Integration challenges and debug complex configuration issues

  • Technical writing/creation of formal documentation such as architecture diagrams, technical designs, and SOPs

Qualifications & Interests:

  • Minimum of 8 years of experience in an IT operational capacity designing, developing, implementing, and operating data analytics technologies within the IT Service Management areas.

  • Experience utilizing RESTful APIs.

  • Responsible for the creation and maintenance of technical design and as-built documentation.

  • Experience with configuring and troubleshooting infrastructure components.

  • Splunk experience - minimum 4 years of experience architecting, configuring, deploying, and customizing the tool.

  • Strong understanding of Splunk configuration files and architecture

  • Knowledge of advanced search and reporting commands

  • Demonstrated ability to create complex dashboards, forms, and visualizations

  • Understanding of System Log Files and other structured and non-structured data

  • Intermediate level understanding of Solaris, Linux and Windows operating systems

  • Effective verbal and written communication skills that include the ability to describe highly technical concepts in non-technical terms

  • Splunk Architect or Splunk Administrator certification preferred

  • Knowledge of a scripting language and UNIX command line

  • Strong knowledge of application monitoring and event management

  • Knowledge in the Common Information Model (CIM), Understand the relationship between the CIM and knowledge objects, ability to create a lookup file and create a lookup definition& field aliases and calculated fields

  • Understanding of Splunk workload management

The Perks:

  • Comprehensive medical, dental and vision plans for you and your dependents

  • 401(k) Retirement Plan with Employer Match, 529 College Savings Plan, Health Savings Account, Life Insurance, and Long-Term Disability

  • Competitive Compensation

  • Training and development programs

  • Stocked kitchen with snacks and beverages

  • Collaborative and cool office culture

  • Work-life balance and generous paid time off

***To all recruitment agencies: Trace3 does not accept unsolicited agency resumes/CVs. Please do not forward resumes/CVs to our careers email addresses, Trace3 employees or any other company location. Trace3 is not responsible for any fees related to unsolicited resumes/CVs.

Listing Details

  • Citizenship: Not Provided
  • Incentives: Not Provided


  • Education: Not Provided
  • Travel: Not Provided
  • Telework: Not Provided

About Us

NinjaJobs is a community-run job platform developed by information security professionals. Our unique approach of focusing strictly on cybersecurity positions allows us to personalize the user experience.

Our Contacts

1765 Greensboro Station Pl.
Suite 900
Tysons Corner Va 22102

(703) 594-7765