Description
We are seeking a Splunk Administrator to join our team in Suitland, MD. As a Splunk Administrator, you will support our Navy customer by managing, optimising, and securing enterprise Splunk environments to strengthen security monitoring, log analytics, and defensive cyber operations. The salary range for this position is $107,900.00 - $195,050.00.
Primary Responsibilities
- Administer, configure, and maintain Splunk Enterprise, Add-ons, and Universal Forwarders.
- Build SQL queries, dashboards, alerts, and CIM-compliant data mappings.
- Integrate Splunk with AWS, databases, Linux, and Windows systems.
- Monitor system performance and troubleshoot ingest, parsing, and indexing issues.
- Support RMF compliance activities and documentation.
- Automate tasks using Python and shell scripting.
Required Qualifications
- Bachelor's degree in Computer Science, Information Technology, Information Assurance, or a related discipline with 8+ years of relevant experience, or a Master's degree with 6+ years of relevant experience.
- Active TS/SCI clearance in DISS and required program access.
- Active IAT Level III certification (such as CISSP).
Desired Qualifications
- Splunk User Behavior Analytics (UBA) Administration and Sustainment experience.