Splunk Engineer

Security Clearance:Active TS/SCI with Polygraph in DISSMinimum Requirements:Bachelors degree (BA/BS) required; preferred fields include Computer Science, Computer Engineering, Mathematics, Statistics, or a related technical discipline3+ years of experience with Splunk EnterpriseExperience developing searches, reports, alerts, and dashboards using Splunk Search Processing Language (SPL)Hands-on experience managing Splunk infrastructure, including Indexers, Search Heads, Universal Forwarders, and Index ClustersExperience onboarding, ingesting, and indexing new data sourcesFamiliarity with Splunk configuration files (e.g., inputs.conf, props.conf) and troubleshooting via both GUI and command-line interfaces1+ year of experience with Linux and/or Windows system administrationExperience creating architectural and infrastructure diagramsProficiency with SharePoint, Jira, and ConfluenceExperience working within Agile/Scrum teamsAbility to provide status updates, presentations, and briefings to stakeholdersAvailability to work onsite in a SCIF environment 23 days per weekKey Responsibilities:Design, develop, and maintain Splunk dashboards, reports, alerts, and monitoring solutionsAdminister and support Splunk environments, including infrastructure components, configurations, and performance optimizationPerform data onboarding, parsing, normalization, and indexing for new log sourcesTroubleshoot and resolve Splunk system, infrastructure, and configuration issuesDevelop and maintain technical documentation, architecture diagrams, and operational proceduresCollaborate with engineering, security, and operations teams to support monitoring and analytics initiativesProvide regular progress updates and technical briefings to stakeholdersSupport continuous improvement efforts through automation and process optimizationSkills and Proficiencies:Splunk Enterprise administration and engineeringSearch Processing Language (SPL)Linux and Windows system administrationData ingestion, parsing, and indexingInfrastructure management and troubleshootingScripting and automationAWS cloud technologiesInfrastructure as Code (IaC)Agile/Scrum methodologiesTechnical documentation and diagram creationAdditional Information:Experience with Splunk Enterprise Security (ES) preferredExperience with Splunk User Behavior Analytics (UBA) preferredExperience with automation tools and Infrastructure as Code (IaC)Experience developing scripts and integrations using Python, Bash, Boto3, JSON, YAML, and XMLExperience working within AWS environmentsExperience with Docker, Kubernetes, and AnsibleStrong verbal and written communication skillsExcellent organizational and time management skillsExperience supporting secure government environments and SCIF operations is highly desirablePreferred Certifications:Splunk Enterprise Certified AdminSplunk Enterprise Certified ArchitectSplunk Enterprise Security CertificationSplunk User Behavior Analytics Certification
recblid g53v8vh6tcvur6z4j2wahudcoyv8ex