Splunk Systems Engineer - TS​/SCI w​/Poly

Overview

Type of Requisition: Regular

Clearance Level Must Currently Possess: Top Secret SCI + Polygraph

Clearance Level Must Be Able to Obtain: Top Secret SCI + Polygraph

Public Trust/Other

Required:

None

Job Family: IT Infrastructure and Operations

Job Qualifications:

Skills: Enterprise Technologies, SIEM Tools, Splunk (Inactive)

Certifications: None

Experience: 2 + years of related experience

US Citizenship

Required:

Yes

• The Digital Services SIEM Team requires an experienced Splunk System Administrator to system engineer to perform all aspects of Splunk Enterprise and ITSI administration, maintenance, and operation of global enterprise solution used for complex Splunk applications, dashboards and reports.
  
  Duties include:
  
  monitoring Splunk infrastructure system health and data feeds; install, and configuration of Splunk Indexers, Forwarders, Deployment Servers and Search-Heads; onboarding new data; supporting cybersecurity and operations teams and driving complex Splunk dashboard deployments/reports and working side by side with the customers to solve their unique problems across a variety of use cases.
• HOW A SYSTEMS ENGINEER WILL MAKE AN IMPACT
• • Ensure the Splunk infrastructure functions properly with PKI-based authentication, corporate authorization services, firewalls, and SSL/TLS communications.
• • Contribute to development and ongoing improvement of industry best practices and standards for maintaining data analytics enterprise technologies.
• • Assist with installing, testing, and deploying hotfixes/patches for Splunk app/product releases to manage enterprise vulnerabilities.
• • Assist with development of knowledge articles, documentation, and work instructions used by the Splunk, server, desktop and Information System Security teams, and Tier 2/3 Help Desk technicians.

• Education: Bachelor of Arts/Bachelor of Science
• Required Experience: 2+ years of related experience
• Security Clearance Level: TS/SCI w/Poly
• Required
  
  Skills and Abilities:
  
  Experience managing user authentication within Splunk to include Role and Attribute Based Access Controls (RBAC/ABAC), authentication with LDAP/AD, and managing access via HEC tokens is highly preferred. Experience implementing and managing Apps within Splunk is highly preferred.
• Preferred
  
  Skills:
  
  Experience reviewing network, host and firewall security logs; experience with scripting languages such as CSS, HTML, JavaScript, Python, and shell scripting to automate tasks and manipulate data; experience integrating DBConnect and other technical add-ons; experience with Splunk Machine Learning Toolkit (MLTK); knowledge of RMF, Trellix ePO, NESSUS, SCAP and vulnerability scanning; analytics, Hadoop, Map Reduce, and visualization are a plus;
  Power Shell or Python programming;
  Service Now; strong organization, communication, and collaboration skills; customer-focused and results oriented.

• Location:
  
  On Site
• US Citizenship Required
• 40 hours/week;
  Day-shift, M-F; available for after hours on call.
• DoD 8570 Minimum:
  Security+ OR Network+ Certification

• Salary range:
  The likely salary range for this position is $102,000 - $138,000. Salary will be set based on experience, location and contractual requirements.
• GDIT offers comprehensive benefits including 401K with company match, health and wellness packages, paid education and certifications, and other programs described in the Total Rewards.
• Equal Opportunity Employer / Individuals with Disabilities / Protected Veterans