SRE Cyber Tools, Splunk Admin

What you'll do

• Administer and maintain distributed Splunk Enterprise environments across hybrid cloud and on-premises infrastructure.
• Monitor platform health, data ingestion, indexing throughput, and search performance to troubleshoot technical issues.
• Develop and execute automated testing frameworks to simulate real-world conditions and validate system resilience.
• Support Splunk Cloud integrations and maintain applications, dashboards, alerts, and saved searches.
• Perform patching, vulnerability remediation, and STIG compliance to ensure system hardening.
• Execute platform upgrades, migrations, and infrastructure modernization using scripting and configuration-management tools.
• Participate in incident response, outage troubleshooting, and root cause analysis for mission-critical operations.
• Maintain operational documentation, architecture diagrams, runbooks, and standard operating procedures.

What we're looking for

• Must be a U.S. Citizen and possess an active Secret Security Clearance.
• Requires a BS degree with 8-10 years of relevant experience or a Master’s with 7 years of relevant experience.
• Must have a DoD 8570.01 IAT Level II Certification.
• Must have a Splunk Enterprise Certified Admin or Splunk Cloud Certified Admin Certification.
• Minimum three years of experience administering Splunk Enterprise v9 in hybrid cloud and on-premises production environments.
• Experience administering and troubleshooting Red Hat Enterprise Linux (RHEL) 8 and/or RHEL 9 servers.
• Experience with STIGs, Risk Management Framework (RMF), vulnerability management, and compliance frameworks.
• Experience using at least one scripting language such as Python, Bash, or PowerShell.