Splunk Engineer CLEARED

Position Splunk Engineer – Hybrid (2–3 days per week on site in Alexandria, VA) Requires a current Top‑Secret clearance. Clearance sponsorship may be available if needed. Responsibilities Design, configure, and maintain Splunk Enterprise environments, including indexers, search heads, and universal forwarders. Develop and optimize searches using Search Processing Language (SPL). Build and maintain reports, dashboards, and alerts for operational and security insights. Onboard and normalize new data sources into Splunk. Manage and troubleshoot Splunk configurations such as inputs.conf, props.conf, and transforms.conf. Perform system administration tasks across Linux and Windows environments. Create and maintain architecture diagrams and technical documentation. Collaborate with agile/scrum teams and provide regular updates to stakeholders. Utilize ticketing and collaboration tools such as Jira, Confluence, and SharePoint. Qualifications 3+ years of experience with Splunk Enterprise administration and engineering. Proficient in SPL query development, reports, alerts, and dashboards. Experience managing Splunk infrastructure. 1+ year of experience in Linux and/or Windows system administration. Experience creating architectural or infrastructure diagrams. Familiarity with ticketing and collaboration tools (Jira, Confluence, SharePoint). Strong communication and teamwork skills. Ability to work on-site in a secure facility 2–3 days per week. Bachelor’s degree in a technical or related field. Preferred Qualifications Experience with Splunk Enterprise Security (ES) and User Behavior Analytics (UBA). Background in security analytics and monitoring platforms. Knowledge of automation and Infrastructure-as-Code tools (IaC). Scripting experience using Python, Bash, Boto3, JSON, YAML, and XML. Experience with Amazon Web Services (AWS). Familiarity with modern DevOps tools such as Ansible. Strong time management and organizational skills. Certifications Splunk Enterprise Security Architect Certification (preferred). #J-18808-Ljbffr