Splunk Administrator

Description

The Digital Modernization team within Leidos' DISA IT is seeking a Splunk Administrator to join our team. With the CESO program, the Defense Information System Agency (DISA) is looking to transform the existing Secure Web Services (SWS) environment, which provides secure information sharing to the community, into a more mature service offering to meet the DoD and intelligence communities. As part of this task order, Leidos will manage the commercial cloud migration and disestablishment of legacy systems, fully automate the continuous development & continuous integration environment, fourth estate consolidation, professionalize services - ITIL/DevSecOps based processes.

Primary Responsibilities:

• Configure, and maintain Splunk Core, Enterprise Security, and other premium Splunk applications.
• Perform the onboarding of new data sets and routinely review the health of ingested data.
• Manage data inputs and indexing, perform troubleshooting activities related to the Splunk Enterprise architecture and issues related to user access and data integrity.
• Deploy technical add-ons and application plug-ins to quickly establish a baseline dashboard and alerts for the various technologies within the CESO environment
• Support teams in using Splunk for log analysis and monitoring though guidance of panel and dashboard development best practices.
• Design efficient and reusable reports and dashboards to integrate multiple mission applications' health, performance and operational data systems into Splunk

• Bachelor's degree and 4+ years of prior relevant experience. Additional experience may be considered in lieu of degree.
• Active Top Secret security clearance with SCI eligibility is required prior to start. Candidate will be required to obtain CI/POLY after program start.
• DoD 8570 IAT II certification
• Splunk Enterprise Certified Administrator
• Foundational knowledge and experience with Linux operating systems
• Experience working in cloud environments.
• Excellent written and oral communications skills and ability to appropriately present technical material to both technical and non-technical audiences

• AWS Certified Cloud Practitioner certification
• Deployment of Splunk through Infrastructure as Code (IAC)