Apply on Employer Site

SAIC · 1 day ago

Splunk Administrator Principal

New Orleans, LA

Full-time

Onsite

Lead/Staff

9+ years exp

SAIC is seeking a Splunk Administrator to support their customer site in New Orleans, LA. The role involves administration, maintenance, and enhancement of the Splunk platform to ensure optimal performance for security and business operations.

Information TechnologySecurityService IndustrySoftware

Work & Life Balance

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Install, configure, and maintain Splunk Enterprise software, Apps, and Add-ons

Configure data inputs from servers, applications, and network devices

Manage indexes, parsing, and data normalization for multi-tenant environments

Troubleshoot configuration, indexing, and performance issues

Develop dashboards, reports, alerts, and saved searches using SPL

Support data collection for security incident response and forensics

Create and maintain system documentation and configuration tracking

Manage user roles, RBAC permissions, and STIG compliance

Integrate Splunk with enterprise tools such as ServiceNow, Tenable ACAS, Trellix ESS, EvaluateSTIG, and eMASS

Support Enterprise Security (ES) and IT Service Intelligence (ITSI) modules for performance and security enhancement

Qualification

Splunk architectureSplunk Processing Language (SPL)DoD STIG compliancePowerShellPythonLinuxCompTIA Security+CISSPCASPBashWindowsNetworking principlesVirtualizationRed Hat Enterprise Linux (RHEL)

Required

Nine (9) years of experience with a bachelor's degree in Electrical, Electronic, or Computer Engineering; Computer Science; or Information Systems

At least one (1) of the following certifications: CompTIA Security+, CompTIA Advanced Security Practitioner (CASP), Certified Information Systems Security Professional (CISSP)

Strong understanding of DoD STIG and auditing/monitoring controls

Advanced knowledge of Splunk architecture, configuration, and optimization

Proficiency in Splunk Processing Language (SPL)

Experience with PowerShell, Bash, and Python for automation

Working knowledge of Windows, Linux, and networking principles

Familiarity with virtualization and Red Hat Enterprise Linux (RHEL)

MUST BE A US CITIZEN WITH AN ACTIVE SECRET CLEARANCE AND THE ABILITY TO OBTAIN A TOP SECRET