Remote - Security Architect - Data Modeling (Only W2, No C2C / 1099)

Job Description Job Description Job Title: Security Architect - Data Modeling (Only W2, No C2C / 1099)
Location: 100% Remote
Duration: 12-month contract (with possible extension)
Interview Process: 1-2 rounds of virtual interviews with camera on
Position Overview
The consultant will primarily focus on CRIBL data modeling, log pipeline design, and ingestion within a large-scale enterprise security environment. The successful candidate will have extensive hands-on experience designing, implementing, maintaining, and optimizing CRIBL pipelines and data models for security logging and analytics.
The consultant will work closely with enterprise security architects and engineering teams to design, implement, integrate, and continuously improve security technologies and services. The role also provides technical support across multiple security disciplines, including SIEM, XDR, vulnerability management, Data Loss Prevention (DLP), endpoint security, Linux security sensors, and security automation.
Key Responsibilities
Design, develop, deploy, and support CRIBL data models and log ingestion pipelines in an enterprise security environment.
Assist with the planning, architecture, configuration, deployment, and operational support of enterprise security platforms.
Support SIEM platforms through log ingestion, data modeling, monitoring, analysis, and reporting.
Assist with the design and configuration of Linux-based security sensors and endpoint monitoring tools.
Support XDR, vulnerability management, DLP, endpoint security, and security awareness platforms.
Collaborate with security architects to design and implement enterprise security solutions aligned with business objectives, regulatory requirements, and organizational risk tolerance.
Design and deploy security controls and countermeasures to address known and emerging threats.
Ensure consistent implementation of security controls across enterprise infrastructure and applications.
Validate security control effectiveness and recommend improvements.
Support incident detection and response through security monitoring, log analysis, investigation support, and reporting.
Develop and maintain technical documentation, implementation guides, architecture documentation, and standard operating procedures.
Develop automation and integrations using Python, Bash, and other scripting technologies.
Support secure configuration and hardening of Linux and Windows systems.
Participate in an on-call rotation to provide operational security support.
Occasionally perform onsite work and local administrative tasks within SC, as needed.
Perform other duties as assigned by the Department of Administration's Division of Information Security.
Required Qualifications
Technical Skills
Strong hands-on experience with CRIBL data modeling and log pipeline design/implementation.
Strong understanding of enterprise security architecture and security engineering principles.
Experience implementing and supporting enterprise security technologies, including:
SIEM
XDR
Vulnerability Management
Data Loss Prevention (DLP)
Endpoint Security
Experience developing security automation and integrations using Python and/or Bash.
Strong knowledge of cybersecurity best practices, threat detection, and defensive security strategies.
Experience with Linux and Windows operating systems, including system hardening and security configuration.
Understanding of networking concepts, security protocols, and secure system design.
Experience supporting large enterprise IT environments and/or system deployments.
Education
Bachelor's degree in Information Technology, Information Security, Cybersecurity, or a related field.
Eight (8) years of relevant professional experience may substitute for the educational requirement.
Experience
5+ years of experience supporting large IT environments and/or system deployments is preferred.
Demonstrated experience designing, implementing, and maintaining security solutions in enterprise environments.
Preferred Qualifications
Hands-on CRIBL data modeling experience.
Hands-on SIEM administration, analysis, and reporting experience.
Experience building and deploying Linux-based security sensors.
Knowledge of security frameworks and compliance standards, including:
NIST Cybersecurity Framework (NIST CSF)
CJIS
IRS 1075
CMS MARS-E
CISSP certification.
CompTIA Security+ certification.
Mandatory Screening Requirements
Candidates must satisfy the client's mandatory screening requirements:
Successful completion of a full credit check during the initial hiring process.
Successful completion of a criminal background check during the initial hiring process.
Once onboarded, the consultant must obtain and maintain annual CJIS certification as required.
These screening and compliance requirements are strictly enforced and non-negotiable.
Ideal Candidate Profile
The ideal candidate is a hands-on security engineering professional with strong CRIBL data modeling and log pipeline expertise, combined with enterprise security architecture experience. The candidate should be comfortable working across security platforms such as SIEM, XDR, vulnerability management, DLP, and endpoint security, while also possessing strong Linux/Windows, scripting, automation, and security engineering skills.
Candidates with direct CRIBL implementation experience in large-scale security environments, SIEM expertise, and knowledge of NIST CSF/CJIS/IRS 1075/CMS MARS-E will be particularly relevant.
Required Skills - Priority Order
1. CRIBL Data Modeling and Log Pipeline Design & Implementation
2. Enterprise Security Architecture and Engineering
3. Enterprise Security Tools - SIEM, XDR, Vulnerability Management, DLP, Endpoint Security
4. Python/Bash Scripting, Automation, and Integrations
5. Cybersecurity Best Practices, Threat Detection, and Defensive Security
6. Linux and Windows Administration, Hardening, and Security Configuration
7. Networking, Security Protocols, and Secure System Design
8. Large-Scale IT Environment/System Deployment Support
Preferred Skills - Priority Order
1. Hands-on CRIBL Data Modeling
2. SIEM Administration, Analysis, and Reporting
3. Linux-Based Security Sensor Deployment
4. NIST CSF, CJIS, IRS 1075, and CMS MARS-E
5. CISSP and/or CompTIA Security+

InstantServe is Proud to be an EOE and will consider all applications without regard to race, genetic information, sex, age, color, religion, national origin, veteran status, disability, or any other characteristic protected by law. Applicants with disabilities that require accommodation or assistance in a position please call or email . This is a dedicated line designed exclusively to assist job seekers whose disability prevents them from being able to apply online.