Splunk Engineer - Top Secret/SCI Clearance with Full Scope Polygraph Required

Candidates must have Top Secret/SCI Clearance with a Full Scope Polygraph. 

Onsite in Annapolis Junction, MD

6+ years of experience is required
 

The Splunk engineer is expected to use Splunk software in his/her everyday job for searching, monitoring, and analyzing machine-generated data. 

• Scripting Experience (python etc.); pulling data from tools via RestAPI; 7-10 years of experience. 
• Its current version is 8.5 running on MASH. Splunk is being used for metrics, diagnosing problems, and pulling data from repositories on our servers from tools such as CASPORT, LATTEART, JIRA, and CONFLUENCE. This data is being assembled into dashboards.

Splunk tool specs:

• 3 search heads
• 4 indexers
• 1 master loader 
• 1 load balancer
• 2 forwarders 

The role will include: 

• administer Splunk clusters
• upgrade the tool when required
• API data calls
• IAVA support 
• CentOS7 to RHEL8 upgrade
• Moving to AWS
• pulling logs for servers
• creating dashboards and briefing material using Splunk data for COR-T

Splunk Engineer required to establish a process to formally and proactively control and manage changes to requirements, consider impacts prior to commitment to change, gain stakeholder buy-in, eliminate ambiguity, ensure traceability to source requirements, and track and settle open actions

Manage and ensure the technical integrity of the system baseline over time, continually updating it as various changes are imposed on the system during the lifecycle from development through deployment and operations & maintenance

Develop scenarios (threads) and an Operational Concept that describes the interactions between the system, the user, and the environment, that satisfies operational, support, maintenance, and disposal needs

Establish and follow a formal procedure for coordinating system integration activities among multiple teams, ensuring complete coverage of all interfaces