Splunk Engineer

Splunk Engineer

Marathon TS is looking for a Splunk Engineer to support our efforts at EOUSA. The primary scope of duties is providing Splunk maintenance, dashboarding, and reporting support to multiple Splunk distributed enterprise environments. The Junior Splunk Engineer shall, under the guidance of the Network Operations IT Program Manager, be responsible for the daily operations and maintenance of the NOS Splunk deployment, to include:

• Perform daily administrative tasks to manage Splunk datasets and storage utilization. This includes monitoring automated backup tasks, manually backing up data if necessary, monitoring storage utilization on Splunk servers in all environments as well as network attached storage.
• Maintain Splunk Knowledgebase by updating existing and creating new KB articles as identified by the team.
• Create and update Splunk resources including saved searches, visualizations, alerts, dashboards and any other ad hoc deliverables as needed.
• Interface with user community and provide first level of support to troubleshoot issues or assist with any other Splunk requirements.
• Coordinate with, accept tasking from, accept guidance from, and collaborate on priorities with Senior Splunk engineer / Task lead.
• Participate in periodic stand-up task meetings. Frequency may be daily or multiple times per week based on projects in process.
• Create Splunk reports and dashboards as identified as needed based on enterprise customer requirements or internal team needs.
• Manage Splunk lookups by verifying that automated jobs are updating lookup tables properly as well making adhoc changes as necessary.
• Monitor, administer and maintain accessibility to Splunk components including search heads, indexers, deployers, cluster masters, forwarders and syslog servers for continuous production environment uptime
• Coordinating with various components to troubleshoot issues
• Manage and secure RHEL and Windows servers for Splunk platform including patches and access controls.
• Assist team with reviewing/assessing/implementing new data sources, ie: syslog, scripted input, db inputs
• Working with IT Managers to validate data and provide training on new dashboard enhancements
• Assist with integrating various data sets into Splunk and creating new dashboards to ensure the confidentiality, integrity, security and availability of the WAN
• Provide a weekly Progress/Exceptions Report to include a list of tasks assigned, completed, and pending.

Required Education, Experience, & Skills

• Must have 2 years of experience in as a SPLUNK administrator/engineer in an enterprise environment similar in size and scope

Marathon TS is committed to the development of a creative, diverse and inclusive work environment. In order to provide equal employment and advancement opportunities to all individuals, employment decisions at Marathon TS will be based on merit, qualifications, and abilities. Marathon TS does not discriminate against any person because of race, color, creed, religion, sex, national origin, disability, age or any other characteristic protected by law (referred to as "protected status").