SITEC - Splunk Data Engineer - MacDill AFB

SITEC
- Splunk Data Engineer
- Mac Dill AFB

Job Location:

Mac Dill AFB, Florida, USA

Peraton requires Systems Engineers to support the Special Operation Command Information Technology Enterprise Contract (SITEC) - 3 EOM. This position is located at Mac Dill AFB in Florida.

The purpose is to provide USSOCOM, its Component Commands, TSOCs, and deployed forces with Operations and Maintenance services to maintain Network Operations, systems, network infrastructure, end‑user support, configuration, change, license, asset management, training, and IMAC services. The responsibilities support USSOCOM, CIO/J6, and end‑users globally 24x7x365.

The Splunk Data Engineer will serve as a technical subject‑matter expert focused on visibility and analytics for the Zero Trust architecture.

Responsibilities include:

• Engineer, configure, and maintain robust data onboarding pipelines to ingest telemetry into the enterprise Splunk deployment.
• Implement and optimize Splunk Universal Forwarders, Heavy Forwarders, and Splunk Edge Processors to manage data routing, filtering, and masking at the enterprise edge.
• Design and implement standardized data tagging and field extraction schemas, mapping incoming data sources to the Splunk Common Information Model (CIM).
• Develop custom technology add‑ons (TAs) to parse, clean, and enrich non‑standard mission data prior to ingestion.
• Troubleshoot and resolve complex data parsing, event breaking, and time‑stamping issues to guarantee search performance and minimize ingest‑to‑search latency.
• Collaborate with enterprise architects and network engineers to establish secure, encrypted, highly available transport pathways (e.g., Syslog, HEC) into Splunk.
• Design and implement data reduction strategies and edge‑filtering policies to optimize licensing costs while retaining critical logs per DoD compliance mandates.
• Maintain comprehensive technical documentation, including data flow diagrams, ingestion matrices, and data taxonomy schemas.

Required Qualifications:

• Minimum 12 years of experience with a high school degree, 10 years with an associate degree, 8 years with a bachelor’s, or 6 years with a master’s.
• DoD 8570 IAT II Certification.
• DoD Top Secret/SCI clearance.

Desired

Qualifications:

• Compliance with DoW 8140 under the Work Role Code 451 – Systems Administrator Intermediate or higher by 1 Oct 26.
• Previous experience operating within DoW or DoD enterprise network environments.
• Deep understanding of the DoD Zero Trust Strategy, focusing on Data visibility, tagging, and analytics.
• Experience with scripting languages (Python, Power Shell) for automation of data classification tasks and tool API integration.
• Hands‑on experience with pipeline middleware and syslog aggregation tools such as Apache Kafka, Apache NiFi, syslog‑NG, or Rsyslog.
• Demonstrated experience configuring and scaling Splunk Edge Processors or Heavy Forwarders to filter, mask, and route high‑volume telemetry at the enterprise edge.

$104,000 – $166,000. This typical salary range depends on the scope and responsibilities, experience, education, skills, location, and contract considerations. Eligible individuals may benefit from overtime, shift differential, and discretionary bonuses.

Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.