Senior Splunk Administrator

Description

We have an IMMEDIATE NEED a highly skilled Senior Splunk Administrator to join our team and take charge of designing, implementing, and maintaining our Splunk environment as part of the DISA Defense Red Switch Network in support of an enterprise VoIP management system. The ideal candidate will possess a deep understanding of Splunk architecture and its various components including forwarders, indexers, and web interfaces. Moreover, proficiency in setting up Splunk on a Red Hat Enterprise Linux 8 (RHEL 8) system that is hardened is essential for this role. Additionally, the candidate should demonstrate expertise in integrating Splunk with RSA and effectively configuring it to work seamlessly with both RHEL 8 and Windows environments.

Responsibilities:

• Design and Architecture: Design, implement, and maintain Splunk environments including forwarders, indexers, search heads, and deployment servers.
• Installation and Configuration: Install, configure, and integrate Splunk and its components on RHEL 8 systems, ensuring optimal performance, scalability, and security.
• Security Hardening: Harden the Splunk environment on RHEL 8 systems to meet security compliance standards and best practices.
• Integration: Integrate Splunk with RSA for secure authentication and authorization across the environment.
• Monitoring and Maintenance: Monitor Splunk infrastructure health, performance, and capacity; perform routine maintenance tasks to ensure uninterrupted service.
• Troubleshooting: Troubleshoot issues related to Splunk infrastructure, including performance bottlenecks, data ingestion problems, and search optimization.
• Documentation: Create and maintain comprehensive documentation including architecture diagrams, installation guides, and troubleshooting procedures.
• Collaboration: Collaborate with cross-functional teams including security, network, and system administrators to ensure seamless integration of Splunk within the IT infrastructure.

Core Qualifications:

• Current DoD TS/SCI security clearance.
• Bachelor's degree in Computer Science, Engineering, or a related field and a minimum of 12+ years of experience in system administration, database administration, network engineering, software engineering, or software development, with a concentration in Cybersecurity
• Eight (8) years of experience with Linux and Windows system administration or an advanced understanding of operating systems and common operating environmen
• Five (5) years of experience administering Splunk in distributed deployments
• Excellent written and verbal communication skills, ability to work closely with multiple customers, manage expectations and track engagement scope
• Proficient at data on-boarding activities including routing, parsing, and normalizing events to the Splunk Common Information Model (CIM)
• Proficient onboarding data using Splunk add-ons for Windows, Linux, and common third-party devices and applications
• Experience onboarding data into Splunk via forwarder, scripted inputs, and modular inputs from a variety of sources
• Experience with Splunk performing systems administration, including performing installation, configuration, monitoring system performance and availability, upgrades, and troubleshooting
• General knowledge of networking and security troubleshooting (firewalls, routing, NAT, etc.)
• Splunk implementation and troubleshooting experience
• Proficiency developing log ingestion and aggregation strategies per Splunk best practices
• Perform integration activities to configure, connect, and pull data with 3rd party software APIs
• Ability to autonomously prioritize and successfully deliver results
• Must have a Splunk Certified Architect certification
• Must have a DoD 8570 IAT Level II (or Level III) certification (e.g. Sec+ CE)
• All candidates must be US CITIZENS to be considered for the position

Preferred Qualifications:

• Experience configuring and maintaining the tool in a multi-tenant environment
• Experience troubleshooting RSA and Windows integration.
• Experience troubleshooting RSA integration with Linux through PAM
• Experience troubleshooting Cisco ISE AAA
• Experience in troubleshooting LDAPS
• Experience with application integration with Radiant One through LDAPS

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

Securing Your Data

Beware of fake employment opportunities using Leidos' name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.