Security Infrastructure Architect (Splunk)

The Illinois Tollway is dedicated to providing and promoting a safe and efficient system of highways while ensuring the highest possible level of service to our customers. Whether it's I-PASS, the Move Illinois Program, open road tolling or keeping you safe with our H.E.L.P. trucks, we are committed to delivering great benefits and services to customers.

The Tollway is a user-fee system – no state or federal tax dollars are used to support maintenance and operations. Operations are funded by toll and concession revenues.

Under the leadership of the Board of Directors and Executive Staff, the Tollway is committed to achieving the following goals: increase collaboration with regional transportation and planning agencies, promote the regional economy, maintain financial integrity, foster environmental responsibility and sustainability, maintain the safety and efficiency of the Tollway system, further transparency and accountability, enhance customer service, and maintain public trust.

In support of this mission, the Security Infrastructure Architect (Splunk) will be responsible for designing, implementing, and managing a comprehensive security architecture using Splunk software

The Security Infrastructure Architect (Splunk) will serve as a technical expert responsible for designing, implementing, and managing a comprehensive security architecture using Splunk software. The Security Architect will leverage Splunk’s data analysis capabilities to identify potential threats, monitor security incidents, and develop custom security solutions tailored to the Tollway’s specific needs.

• Assess Illinois Tollway's security posture and identify areas where Splunk can enhance threat detection and response.
• Leverage Splunk data analysis capabilities to identify potential threats, monitor security incidents, and develop custom security solutions tailored to Illinois Tollway’s needs. 
• Design and implement Splunk security solutions including data collection strategies, custom searches, alerts, dashboards, and visualizations to monitor critical security events.
• Integrate Splunk with other security tools and infrastructure components to create a unified security ecosystem and optimize threat detection and response capabilities.
• Develop and maintain security rules and playbooks to automate incident response actions based on detected threats.
• Investigate security incidents by analyzing Splunk data to identify root cause and potential attackers.
• Collaborate with security operations teams to implement effective incident response procedures.
• Provide Technical support and training to users of Splunk security features.
• All other duties assigned by the Deputy Chief of IT Security.    

• Bachelor’s Degree in Information Technology, Computer Science or related field required for this position.

• 10 years in IT and 5 years in IT security for an enterprise-level organization is required.
• Strong understanding of Splunk architecture, components, and deployment best practices.
• Minimum of five (5) Years implementing Splunk solutions
• Excellent verbal and written communication skills
• Advanced knowledge and understanding of enterprise security best practices
• Demonstrated problem solving and analytical skills.
• Organized and detail oriented.

• Programming skills (e.g., Python)
• Splunk certifications (e.g., Splunk Certified Architect) are a plus.
• Security certification would be considered but CISSP certification is preferred.

Salary : $100,000 - $110,000