Splunk Engineer

Responsibilities

• Architect, deploy, operate, and maintain enterprise Splunk infrastructure
• Support SIEM data ingestion, indexing, normalization, dashboarding, and alerting
• Develop dashboards and visualizations for security and mission stakeholders
• Manage Splunk configurations, search/index clusters, and knowledge objects
• Support account management, server monitoring, patching, and version upgrades
• Improve log source coverage and quality across enterprise systems
• Use scripting and automation to improve SIEM operations and security analytics
• Support federal cybersecurity standards and secure configuration

Requirements

• U.S. citizenship required
• DHS EOD / suitability required
• 10+ years of experience designing and maintaining Splunk architecture in complex enterprise or government environments
• Expertise with core Splunk components (Indexer, Search Head, Deployer, etc.)
• Experience managing Splunk indexer and search clusters
• Proficiency in Splunk authentication methods like LDAP and SAML
• Advanced ability to extract, transform, and visualize data using Splunk
• Advanced scripting experience in Shell, Python, JavaScript, XML, or CSS
• Experience with Splunk DB Connect and Splunk App for AWS
• Experience deploying or supporting Splunk Cloud services on AWS

Preferred Qualifications

• Prior DHS, DOD, or federal civilian cybersecurity program experience
• Experience supporting large, multi-datacenter Splunk clusters
• Splunk certifications
• Experience in DevSecOps or enterprise security architecture environments

About the Company

Ashburn Consulting, LLC specializes in providing network and network security solutions in complex environments to a select set of government and business clients.