Splunk Engineer

Description

The company is hiring a full-time Splunk Engineer with 8+ years of experience running a Splunk platform, building Splunk applications, and working with IT Service Intelligence (ITSI).

You will build apps that help the team manage, search, analyze and visualize data. The work includes troubleshooting, Splunk application development in a Scrum Agile setup, reviewing the existing environment for weak points, and bringing new data sources on board.

Responsibilities

• Write core scripts that automate Splunk maintenance and alerting.
• Build dashboards, reports and alerts that show business-critical information and keep IT system monitoring efficient.
• Work with Product Owners so platform capabilities keep pace with changing business needs.
• Design scalable, flexible security architectures using standards-based integrations.
• Help write policies for running Splunk infrastructure securely.
• Support cloud deployment and upkeep on AWS and Azure.
• Run software integration tests and cybersecurity compliance tasks.
• Maintain infrastructure used for integration, cyber compliance and network administration.
• Work on both UNIX/Linux and Windows systems.
• Partner with IT teams to find, troubleshoot and fix IT issues using Splunk.
• Work with development and install teams to automate processes and gain efficiencies.
• Write documentation covering configurations, changes and troubleshooting steps.
• Connect Splunk with other enterprise security services as government customers require.
• Meet with government customers to learn their specific security service integration needs.
• Build and maintain integration scripts and configurations for a range of enterprise security services.
• Bring new data sources into Splunk with proper indexing, data normalization and data quality.
• Build and maintain scripts and configurations for onboarding data sources.
• Make sure data flows smoothly from new sources into Splunk.
• Troubleshoot and resolve problems that come up when onboarding data sources.

Requirements

• Required: TS/SCI clearance with counterintelligence polygraph.
• Required: a BA/BS degree and 8 years of experience. Without a bachelor's degree, 10 years of experience with an AA/AS, or 12 additional years of experience with a high school diploma.
• Required: 8+ years of experience supporting IT systems, with demonstrated knowledge.
• Required: 4+ years implementing and operating Splunk systems, including universal and heavy forwarders, search heads, deployment servers and indexes.
• Required: design, develop and implement new features for Splunk products.
• Required: train and support IT staff on Splunk usage and best practices.
• Required: proven experience designing, implementing and maintaining Splunk solutions, such as Splunk Enterprise, Splunk IT Service Intelligence and Splunk Log Management.
• Required: knowledge of Linux security best practices.
• Required: knowledge of cybersecurity compliance, including RMF and IA standards.
• Required: strong problem-solving and analytical skills.
• Required: a service-oriented mindset.
• Required: strong communication and collaboration skills.
• Required: at least one Splunk certification, such as Splunk Certified for ITSI or Splunk Certified Administrator (SCA).
• Desired: experience integrating Splunk with ServiceNow to automate incident, problem and change management workflows.
• Desired: experience with security compliance and ATO (Authority to Operate) support.
• Desired: preferred knowledge of FISMA (Federal Information Security Management Act) requirements.
• Desired: current Security+ or DOD 8570 IAT Level II certification.
• Desired: AWS or Azure certification.
• Desired: ITIL v4 certification.
• Desired: strong understanding of IT operations, security and business intelligence.
• Desired: a good team player who is willing to help others.
• Desired: preferred scripting experience in Python, Perl and JavaScript for Splunk apps and add-ons, plus SQL for structured data, XML and JSON handling, and Splunk Search Processing Language (SPL) for data analysis.

Conditions

Full-time role in engineering, filled as a regular employee.

No travel required.

Proposed salary range: $113,200 - $237,800.

Final pay depends on factors such as location, Federal Government contract labor categories and wage rates, relevant prior experience, specific skills, education and certifications.

The company offers flexibility so employees can balance quality work with their personal lives.

Benefits

• Healthcare, wellness, financial, retirement, family support, continuing education and time off benefits.
• Flexible time off that you can take as you need it.
• Access to learning resources and learning and development opportunities.