Splunk admin

Hi,

Hope you are doing well

Please find the job description given below and let me know your interest.

 Position:   Splunk Administrator (Remote)

 Location:   100% Remote

 Duration:   12+ months

 Job Description

As a Splunk Administrator, you will be entrusted with the critical role of managing and optimizing our Splunk infrastructure. This role involves configuring, maintaining, and troubleshooting Splunk infrastructure, ensuring the reliability, availability, and performance of our data analytics platform. You will work closely with cross-functional teams to design and implement monitoring solutions that enhance the visibility and security of our IT environment.

Responsibilities:

·Install, configure, and maintain Splunk infrastructure, including forwarders, indexers, and search heads.

·Perform regular system upgrades and patching to maintain security and performance.

·Monitor system performance and troubleshoot issues to ensure optimal functionality of Splunk.

·Collaborate with IT and security teams to integrate Splunk with other systems and applications.

·Provide technical Splunk support and training to end-users and stakeholders.

·Develop and maintain documentation for system configurations, processes, and procedures.

·Implement and manage data ingestion processes, ensuring data integrity and availability.

·Develop and manage Splunk dashboards, reports, alerts, and visualizations.

Job Skills:

·Bachelor's degree in Computer Science, Information Security, or related field or equivalent professional experience

·Minimum 5 years of hands-on experience in Splunk Administration

·Minimum 3 years of hands-on experience with AWS

·The below ideal core competencies and experience -

o Proficient in both Linux and Windows environments

o Hardware, software, and network-level troubleshooting skills

o Log management and parsing strategies

o Familiarity with networking concepts and protocols (e.g., TCP/IP, DNS, etc.)

o Exposure to infrastructure as Code (IaC) tools like Terraform and Ansible

MUST HAVES:

·CISSP certification

·Splunk Enterprise Certified Administrator

·Red Hat Enterprise Linux certifications, such as RHCE or RHCSA

·AWS Certified Solutions Architect or SysOps Administrator

·Experience with Splunk Enterprise Security (ES)

·Infrastructure automation experience

·Prior DoD or FedRAMP experience

·Programming/scripting experience (e.g.: Python, PowerShell, Bash, etc.)

·Familiarity with security compliance frameworks and regulations such as NIST 800-171 or 800-53