• Experience is the following is a must: Ansible, Tanium, Crowdstrike, and Trellix • Experience automating technology and workflows in the healthcare setting is also highly preferred • Create and optimize Ansible playbooks, roles, and modules for configuration management and application deployment • Implement automation across hybrid environments (on-premise, cloud, network devices, and servers) • Identify and resolve issues related to Ansible jobs, automation failures, and configuration drift • Work with security, network, and system teams to automate security compliance and infrastructure provisioning

• Design, deploy, and maintain Splunk Enterprise, indexers, search heads (including SHC), cluster master/CM, deployment server/Deployer, forwarders, and KV stores across on‑prem and AWS. • Engineer scalable data onboarding pipelines, parsing, and indexing with props/transforms, HEC, UF/HF, and S3/SQS/SNS-based ingestion. • Enforce RBAC, data retention, index strategy, knowledge object governance, and change control aligned to federal compliance. • Optimize search performance, data model accelerations, KV store usage, and ES notable event throughput and latency. • Develop and tune ES correlation searches, risk-based alerting (RBA), and adaptive response actions mapped to MITRE ATT&CK. • Build dashboards, investigations, and notable event workflows that reduce false positives and drive analyst efficiency. • Maintain CIM-compliant data models; lead normalization and data quality initiatives across cloud, endpoint, identity, and network sources. • Measure and report detection and response efficacy (MTTR, precision/recall, RBA risk scores, SLA adherence). • Engineer Splunk SOAR (Phantom) playbooks and apps with secure, scalable configurations to triage, enrich, and contain threats. • Integrate ES notables with automated triage and ServiceNow IR for incident creation, enrichment, SLA tracking, approvals, and evidence attachments. • Build AWS-focused detection and response: GuardDuty, CloudTrail, Security Hub, VPC Flow Logs, IAM, EC2, S3; implement safe actions (e.g., EC2 isolation, S3 access updates, EBS snapshots, IAM key rotation/MFA enforcement, Security Hub updates) with human-in-the-loop approvals and rollback. • Integrate EDR and identity platforms for host containment, IOC blocking, and remote response via APIs. • Lead Splunk deployments in AWS including scalability, multi-account/multi-region ingestion, and cross-account automation via Boto3 and native services. • Standardize reusable Python modules, SDK usage, and CI/CD practices for app/deployment packaging and version control. • Map controls to FISMA/NIST RMF, FedRAMP, and CMMC; maintain audit-ready evidence through logging, approval trails, and configuration baselines. • Drive POA&M updates, control validations, and continuous monitoring dashboards. • Champion secrets management, least privilege, and safe-response guardrails in all platform and automation changes. • Translate SOC/IR runbooks (phishing, malware, IAM abuse, EC2 compromise) into reliable detections and automations. • Mentor junior engineers and analysts on SPL, ES content development, CIM, and SOAR playbooks. • Partner with stakeholders to prioritize use cases and deliver quantifiable outcomes.

• Assist in all site construction activity and installations, in coordination with QTS Development Team. • Conduct thorough commissioning activities, ensuring all systems are installed, tested, and validated. • Monitor issues during the commissioning process and resolve technical challenges. • Create and review detailed commissioning documentation for accuracy and completeness. • Witness testing of equipment during commissioning and validate operations. • Collaborate with cross-functional teams to ensure seamless integration of systems. • Implement quality control measures to meet regulatory requirements. • Mentor junior Commissioning Engineers.

• Lead, coach, and develop senior engineers responsible for supporting shared core libraries utilized by multiple engineering teams. • Partner with product and business stakeholders to align technical investments with company strategy, balancing long-term platform evolution with near-term priorities. • Guide teams in building distributed, event-driven, and fault-tolerant systems leveraging Kafka, Redis/Redis PubSub, and Postgres. • Provide architectural oversight and ensure best practices are applied when teams build new services leveraging the core shared libraries in Kotlin/Java with Spring Boot. • Partner with product domain engineering managers and tech leads to prioritize shared library enhancements • Set and measure engineering goals (availability, performance, delivery cadence, quality) and hold teams accountable to outcomes. • Champion diversity, inclusion, and growth, ensuring that engineers thrive in a supportive and challenging environment. • Recruit, retain, and scale top engineering talent to meet the demands of growing systems and business needs. • Advocate for engineering across the organization, influencing leadership on technology strategy and distributed systems investment.