System Administrator / Splunk Engineer

Skillsets Required:

Advanced knowledge of Splunk configuration, particularly managing Splunk forwarders, indexers, and search heads.

Experience with data ingestion troubleshooting and optimizing Splunk's performance.

Ability to perform security profile updates, including enhancing security dashboards, validating inputs, and ensuring accuracy of log data.

Familiarity with federal security standards like FISMA and ability to work within compliance-driven environments.

Certifications:

Splunk Core Certified Power User

Splunk Certified Administrator

CompTIA Security+ or any basic cybersecurity certification.

Years of Experience:

3-5 years of experience working with Splunk Enterprise, focusing on administration, security monitoring, and performance optimization.

Experience working with federal systems for at least 1-2 years, ensuring compliance and managing configurations.

Qualifications:

Proven experience managing and optimizing large Splunk environments, particularly in government or federal environments.

Strong troubleshooting abilities with data ingestion, Splunk configurations, and dashboard customization.

Education:

Bachelor's degree in Information Technology, Cybersecurity, or related field.