Location: Herndon,VA, USA
This position is for a large software client. As a Splunk Administrator, you will be entrusted with the critical role of managing and optimizing our Splunk infrastructure. This role involves configuring, maintaining, and troubleshooting Splunk infrastructure, ensuring the reliability, availability, and performance of our data analytics platform. You will work closely with cross-functional teams to design and implement monitoring solutions that enhance the visibility and security of our IT environment. Key Responsibilities: •Install, configure, and maintain Splunk infrastructure, including forwarders, indexers, and search heads. •Perform regular system upgrades and patching to maintain security and performance. •Monitor system performance and troubleshoot issues to ensure optimal functionality of Splunk. •Collaborate with IT and security teams to integrate Splunk with other systems and applications. •Provide technical Splunk support and training to end-uand stakeholders. •Develop and maintain documentation for system configurations, processes, and procedures. •Implement and manage data ingestion processes, ensuring data integrity and availability. Develop and manage Splunk dashboards, reports, alerts, and visualizations. We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to ...@insightglobal.com . To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: . Required Skills & Experience -5+ years of hands-on experience in Splunk Administration -Experience scripting in Bash or Python for automation -Experience with data onboarding, parsing, and indexing in Splunk -Experience writing detection rules -3+ years of hands-on experience doing Splunk administration in a Cloud environment -Must have experience working TCP/IP connectivity and protocol background -Experience with Splunk Enterprise Security (ES) Nice to Have Skills & Experience Exposure to infrastructure as Code (IaC) tools like Terraform and Ansible Splunk Enterprise Certified Administrator Red Hat Enterprise Linux certifications, such as RHCSE or RHCSA AWS Certified Solutions Architect or SysOps Administrator CISSP certification Infrastructure automation experience Prior DoD or FedRAMP experience Programming/scripting experience e.g.: Python, PowerShell, Bash, etc. Familiarity with security compliance frameworks and regulations such as NIST 800-171 or 800-53 Benefit packages for this role will start on the 31st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.