The Splunk Engineers will be responsible for working with multiple application teams to extend the enterprise Splunk deployment for a federal client. In this position, the Splunk Engineers will be responsible for architecting, designing, deploying Splunk forwarders, configuring agents to collect a variety of application logs including both structured and unstructured data, and developing complex dashboards and reports. Candidates will provide subject matter expert guidance to the organizations Chief Technology Officer (CTO) level client managers and other engineering, development, and support teams for the above technologies. The position requires leadership skills to provide oversight and engineering review, designing, developing, deploying Splunk components, testing, and application configuration changes. The purpose of this initiative is to enhance the agencies cybersecurity posture by ensuring that all auditable log and other information is collected, preserved, and reported on through dashboards and visualizations. The position requires working with development teams, systems owners, support contractors, and government representatives to architect, design, and implement innovative modern solutions.

Qualifications/Duties:

• Six (6) years of general work experience and two (2) years of experience architecting, configuring, deploying, and customizing Splunk.
• Act as a Splunk enterprise Subject Matter Expert.
• Responsible for Splunk agent (i.e., - Universal Forwarder) deployment and server infrastructure analysis, optimization, and capacity planning.
• Responsible for onboarding and maintaining a wide variety of data sources to include various OS and application logs.
• Support Splunk on Unix (i.e., - IBM AIX, Solaris), Red Hat Linux, and Windows-based platforms.
• Perform data mining and analysis, using various query and reporting methods.
• Solve/troubleshoot complex integration challenges and configuration issues.
• Create advanced searches, dashboards, and visualizations.
• Manage Splunk knowledge objects.
• Technical writing/creation of formal documentation such as architecture diagrams, technical designs, and SOPs.
• Ability to obtain a government security clearance U.S. citizenship required.

Soft Skills

• Strong understanding of all Splunk architecture components to include search head clustering, indexer clustering, deployment server and monitoring console.
• Strong understanding of configuration files and relationship between GUI configuration and backend configuration file impact Knowledge of advanced search and reporting commands.
• Strong understanding of SPL as well as the ability to develop automated search and apps.
• Demonstrated ability to create complex dashboards, forms, and visualizations.
• Understanding of System Log Files and other structured and non-structured data.
• Experience working with Agile methodologies (Scrum, Lean Startup, XP) and cross-functional teams (Product Owners, Developers, Designers).
• Strong communication and collaboration skills with track record of taking solution ownership.
• Communication skills key! Demonstrate an ability to effectively communicate with leadership and key stakeholders to include performing complex engineering analyses, documenting findings, preparing presentations and documents.
• Experience with hardening applications to ensure cybersecurity compliance.
• Previous experience applications operating within DoD or other Federal Agencies desired.

Education/Certifications:

• BS degree in Information Technology or other related technical discipline
• Splunk certifications (Developer, Admin, Enterprise Security Admin) desired

**MUST BE A US CITIZEN AND BE ABLE TO COMPLETE THE GOVERNMENT'S BACKGROUND INVESTIGATION**