Description

You will manage and optimize Splunk infrastructure to ensure the reliability, availability, and performance of the data analytics platform.

Responsibilities

• Install, configure, and maintain Splunk infrastructure including forwarders, indexers, and search heads.
• Perform regular system upgrades, patching, and manage data ingestion processes to ensure integrity.
• Monitor system performance and troubleshoot hardware, software, and network-level issues.
• Develop and manage Splunk dashboards, reports, alerts, and visualizations.
• Collaborate with IT and security teams to integrate Splunk with other systems and applications.
• Maintain documentation for system configurations, processes, and procedures.

Required Skills

• Minimum 5 years of hands-on Splunk Administration experience.
• Splunk Enterprise Certified Administrator certification.
• Minimum 3 years of hands-on experience with AWS.
• AWS Certified Solutions Architect or SysOps Administrator certification.
• Experience with Splunk Enterprise Security (ES).
• CISSP certification.
• Red Hat Enterprise Linux certifications (RHCE or RHCSA).
• Programming or scripting experience in Python, PowerShell, or Bash.
• Infrastructure automation experience and exposure to IaC tools like Terraform or Ansible.
• Proficiency in both Linux and Windows environments.
• Knowledge of log management, parsing strategies, and networking protocols like TCP/IP and DNS.
• Experience with security compliance frameworks such as NIST 800-171 or 800-53.
• Prior DoD or FedRAMP experience.
• Bachelor's degree in Computer Science, Information Security, or equivalent professional experience.

Key Skills

Education

Not specified