Enterprise Logging Solution (ELS) Engineer

At Accenture Federal Services, nothing matters more than helping the US federal government make the nation stronger and safer and life better for people. Our 13,000+ people are united in a shared purpose to pursue the limitless potential of technology and ingenuity for clients across defense, national security, public safety, civilian, and military health organizations. Join Accenture Federal Services, a technology company within global Accenture. Recognized as a Glassdoor Top 100 Best Place to Work, we offer a collaborative and caring community where you feel like you belong and are empowered to grow, learn and thrive through hands-on experience, certifications, industry training and more. Join us to drive positive, lasting change that moves missions and the government forward! Supports the Enterprise Logging Solution (ELS)/SIEM environment that provides centralized security monitoring and audit/reporting capabilities to the Agency's System Owners, ISSMs/ISSOs, and the SOC, spanning architecture, implementation, and ongoing operations & maintenance, both on-premise and in the cloud. As an engineer on this task, the role analyzes, develops, and tests proposed ELS/SIEM enhancements, migrates and integrates streaming-ingestion architecture into cloud and on-premise environments, and onboards newly added systems into the ELS/SIEM through a defined data-design, collection, and ingestion-testing process. It builds dashboards for System Owners, ISSM/ISSO, executive management, and developers, and maintains a Master Project Schedule reviewed bi-weekly with Government leadership.Day-to-day O&M responsibilities include tuning correlation rules and signatures, maintaining whitelists/blacklists, and integrating ML/AI capabilities into the Agency's SIEM. The Work: Analyze, develop, and test proposed ELS/SIEM enhancements using vendor/industry best practices; assess current capabilities against the Agency's security/logging regulations at regular intervals and perform gap analyses. Migrate/implement ELS/SIEM architecture in cloud and/or on-premise environments; architect and integrate streaming processing solutions for data onboarding/ingestion. Develop implementation plans (including communications plans) for approved enhancements; conduct/verify test configurations and present change requests at Change Control Board meetings. Onboard newly added systems into the ELS/SIEM (data design requirements, data collection, ingestion scheduling/testing) in coordination with System Owners/ISSOs and the Government ELS Team Lead. Create dashboards for System Owners, ISSM/ISSO, executive management, and developers; maintain a Master Project Schedule reviewed bi-weekly with Government leadership. Maintain the SIEM's collection/aggregation of IDS, firewall, proxy, DLP, antivirus, cloud log, and vulnerability-scanner data sources; operate streaming ingestion/analysis solutions. Develop correlation rules, signatures, and risk-based scoring…