Splunk Engineer

What you'll do

• Deploy, administer, and support a distributed Splunk environment at an enterprise scale.
• Standardize Splunk agent and enterprise deployment, configuration, and management using automation.
• Monitor and maintain the logging platform's performance, availability, and capacity.
• Write complex SPLs to create dashboards and alerts for Infosec and other IT organizations.
• Troubleshoot Splunk instances and Splunk Universal Forwarder problems.
• Manage data onboarding, governance, enrichment, and field extraction for various use cases.

What we're looking for

• 2+ years of experience administering or implementing Splunk in a professional setting.
• Experience writing complex regex for field mappings and identifying patterns.
• Experience with Puppet, Ansible, or other automation frameworks.
• Must be a U.S. citizen, national, lawful permanent resident, refugee, asylee, or eligible for Department of State authorization.
• Certifications such as Splunk Enterprise Certified Architect, Splunk Enterprise Security Admin, and Splunk Core Consultant (preferred).
• Familiarity with aerospace, satellite communications, launch vehicle, or factory-floor logging environments (preferred).
• Experience developing or extending Splunk with Python beyond basic SPL (preferred).
• Advanced Linux systems knowledge for large-scale Splunk clusters (preferred).