Gunnison · 2 days ago
Splunk Cloud Administrator
Gunnison is a company focused on tackling ambitious technology projects, and they are seeking a Splunk Cloud Administrator to support cybersecurity operations for the CDC. The role involves designing, implementing, and managing Splunk environments while ensuring reliable security operations and integrating cybersecurity data from various tools.
Information Technology & Services
Responsibilities
Deploy, configure, and maintain Splunk Cloud and Splunk Enterprise across Linux, Windows, AWS, Azure, and container/serverless environments
Administer system upgrades, version control, and troubleshooting across cloud, physical, and virtual systems
Ensure reliable, secure Splunk operations supporting enterprise security functions
Integrate cybersecurity data from diverse tools (e.g., ExtraHop, Gigamon, BigFix, ForeScout, CrowdStrike)
Build secure APIs/ETL pipelines and data flows between Splunk, ServiceNow, and Archer
Create dashboards, alerts, and datasets that enable threat detection, investigations, and compliance reporting
Provide Splunk-based orchestration and automation services
Develop integration requirements, diagrams, data mappings, and implementation plans
Collaborate with subject matter experts to support security automation initiatives
Operate CDM tools integrated with Splunk; maintain asset inventories and security agent coverage
Support vulnerability reporting and POA&M tracking
Configure cybersecurity tools to detect enterprise threats and support Zero Trust principles
Evaluate emerging technologies and advise operational teams on secure implementation
Apply patches per DHS/HHS timelines and follow change management standards
Conduct testing and restore failed systems within one hour
Provide possible after-hours support and notify stakeholders of service impacts
Produce system authorization documentation and maintain records of deployments and integrations
Conduct annual assessments and support security architecture development
Qualification
Required
Expert Splunk Cloud/Enterprise administration; strong SPL, API, ETL, Linux/Windows, AWS/Azure skills
Knowledge of cybersecurity tools, databases, FISMA, vulnerability management, Zero Trust, CDM, and GRC platforms
ServiceNow/Archer familiarity
Strong communication, documentation, analysis, and teamwork capabilities
Splunk Cloud Certified Admin, or Splunk Certified Admin
B.S. in Cybersecurity, Computer Science, Information Technology, or similar area of study
Ability to obtain and maintain a Public Trust
Preferred
Federal or healthcare sector experience; CDC/HHS experience
NIST knowledge
CISSP certification
Security+ certification
M.S. in Cybersecurity, Computer Science, Information Technology, or similar area of study
Benefits
3 weeks of Personal Leave your first year
11 paid Holidays each year
5 days of Flexible Time Off each year
401(k) company match at 50% up to 10% of your salary
Medical, Dental and Vision Insurance
Life and Disability Insurance
Public Transportation Subsidies
Certifications and Training Allowance - $2,500/year!