Splunk Engineer

Job Title: Certified Splunk Engineer

Nakupuna Companies is seeking a highly skilled Certified Splunk Engineer to join our team. The successful candidate will be responsible for the deployment and configuration of Splunk Enterprise tool and its Add-ons across all Naval Supply & Systems Command (NAVSUP) Business Systems Center (BSC) applications.

Key Responsibilities:

• Implement, update, and configure Splunk Enterprise software across all NAVSUP BSC applications.
• Assess log data and database logs to ensure proper formatting and accurate collection of data.
• Develop and implement a mentoring program for NAVSUP BSC employees to train them on all aspects of Splunk tasks/requirements.
• Install and configure Add-ons such as Compliance Essentials for Splunk.
• Create, configure, and refine all dashboards, searches, alerts, pivot tables, data models, and reports for all NAVSUP BSC application and information assurance teams.
• Document all Splunk-related tasks/requirements specified by the client.
• Provide weekly status updates to include information about tasks, duration, resources, dependencies, percent complete, and issues.
• Document lessons learned, best practices, and standard operating procedures.

Requirements:

• Minimum of three years specialization in Splunk configuration and administration.
• Expert-level experience and knowledge of developing and troubleshooting Splunk searches, reports, alerts, visualizations, and dashboards.
• Expert experience and knowledge of configuring, setting up, and modifying the Splunk Enterprise app, DB Connect app, Compliance Essentials, and Splunk Add-ons.
• Expert-level experience of analyzing log files from various types of information systems.
• Experience deploying and configuring Search servers, Splunk Deployment servers, Splunk clustered Indexers, and Splunk forwarders.
• Expert experience onboarding new data sources into Splunk, analyzing the data for anomalies and trends, and building dashboards highlighting the key trends of the data.
• Expert experience communicating and interacting with the Government cybersecurity team members and end users to perform troubleshooting and provide assistance with the creation of Splunk search queries, alerts, reports, and dashboards to meet their STIG, continuous monitoring, logging, auditing, reporting requirements as outlined in DOD policies and guidelines.
• Familiarity with Federal regulatory requirements.

Preferred Qualifications:

• Splunk Engineering experience.
• Linux and SQL/ODBC interfaces experience.
• App interface development using REST APIs experience.
• Project management experience.
• Knowledge and experience of understanding software development life cycle process, including scrum and story maps for development tracking.

Education and Experience:

Bachelor (4-year) degree, with a technical major, such as engineering, or computer science is required. Experience with government and DoD environments is desired.

Certification:

This position requires:

• CompTIA Security+ CE certification. Substitutes for Baseline Certification: CCNA Security; CySA+; GICSP; GSEC; CND; SSCP
• One of the following certifications: Splunk Enterprise Certified Admin, Splunk Enterprise Certified Architect, Splunk Cloud Certified Admin, Splunk Enterprise Security Certified Admin, or Splunk Certified Developer.

Work Location:

This position can be REMOTE and requires minimal travel to client site.

Military Installation Access:

Must be able to qualify for and obtain a base access pass. Must be able to obtain a favorable National Security Agency Check (NACI) including an FBI fingerprint check.

Clearance:

Requires a Single Scope Background Investigation (SSBI), T5 or T5R equivalent investigation (Top Secret). Must be a U.S. Citizen.

Travel:

Ability and willingness to travel one day a week to client site (Mechanicsburg, PA) is strongly desired.

---