41 applicants

Company

True Zero Technologies · 5 hours ago

Splunk Engineer - Consultant Certified/ES Certified Admin/IL5 w/ Secret Clearance (R-00030)

Northern, VA

Full-time

Remote

Mid Level

Maximize your interview chances

Information ServicesInformation Technology

No H1B

Security Clearance Required

Insider Connection @True Zero Technologies

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Maintaining various client's Splunk instances

Data on-boarding

Content development

Reporting

Visualizations

Drive ES adoption and use cases

Designing and implementing ground up distributed Splunk installations

Maintaining and administering enterprise Splunk implementations

Developing custom Splunk content including scheduled searches, reports, dashboards

Configuring indexes, index routing, retention policies

Working in linux and windows environments

Configuring storage subsystems

Managing expectations and tracking engagement scope

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

Splunk engineering experienceSplunk Enterprise Core Consultant CertificationSplunk Enterprise Security Certified AdminData onboarding activitiesSplunk IL5 Cloud/ES ExperienceDistributed Splunk installationsAdvanced Splunk configurationMaintaining enterprise Splunk implementationsCustom Splunk content developmentConfiguring Splunk indexesLinux environmentsWindows environmentsStorage subsystems configurationSELinuxLinux distros familiarityFile permission settingsCustomer management

Required

Secret Clearance Required

Splunk Enterprise Core Consultant Certification Required

Splunk Enterprise Security Certified Admin Required

Splunk IL5 Cloud/ES Experience

Drive ES adoption and use cases

Experience designing and implementing ground up distributed Splunk installations including all Splunk server roles (Search Head, Indexers, Heavy Forwarders and Universal Forwarders, etc.)

Experience with advanced configuration of Splunk including Indexer Clustering and Search Head Clustering.

Experience maintaining and administering enterprise Splunk implementations.

Experience developing custom Splunk content including scheduled searches, reports, dashboards, etc.

Proficient at data on-boarding activities including custom parsing rules, custom Technology Add-On building according to Splunk's Common Information Model (CIM).

Experience configuring indexes, index routing, retention policies, etc.

Experience working in linux and windows environments, ability to configure: Storage subsystems (I.e. partitioning, Volume Groups, Logical Volumes, etc.), SELinux, Familiarity with different flavors of Linux distros (RedHat, CentOS, Ubuntu, etc.), File Permission Settings (linux/windows)

Excellent written and oral skills, ability to work closely with multiple customers, manage expectations, and track engagement scope.