Splunk Solutions Expert (Splunk SME)
Job Description
Job Description
Splunk Solutions Expert (Splunk SME)
Location: Chantilly, VA
Job Description:
Seeking a highly-motivated Splunk Engineer that has 5+ years of experience managing a
Splunk Platform, creating Splunk applications. The Splunk engineer will build applications to help manage, search, analyze, and visualize data. The role includes troubleshooting and
performing Splunk application development following a Scrum Agile approach. The role also includes integrating Splunk with other applications (e.g., ServiceNow)
Responsibilities:
• Design, implement, and maintain Splunk solutions for IT service intelligence, operational
insight, security, and business intelligence
• Maintain Splunk infrastructure (e.g., manage security updates, patch server vulnerabilities)
• Develop and maintain Splunk dashboards and alerts to ensure efficient monitoring and
management of IT systems
• Collaborate with IT teams to identify, troubleshoot, and resolve IT issues using Splunk
• Work with other developers and the Scrum Master to communicate current development status and blockers
• Stay up-to-date with the latest Splunk releases and best practices
• Provide training and support to IT staff on Splunk usage and best practices
Required Qualifications:
• Active TS/SCI Clearance with Counterintelligence (Cl) Polygraph
• 5 + years experience and demonstrated knowledge supporting IT Systems
• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Current Security+ or DOD 8570 IAT Level II Certification
• Design, develop, and implement new features for Splunk products
Proven experience in designing, implementing, and maintaining Splunk solutions including, but not limited to: Splunk Enterprise, Splunk IT Service Intelligence, Splunk Log Management
• Knowledge of Linux security best practices
• Excellent problem-solving and analytical skills
• Service-oriented mindset
• Strong communication and collaboration skills
• Splunk Certifications:
• Splunk Certified Enterprise Administrator (SCA)
Desired Qualifications:
• ServiceNow Certified System Administrator (SCSA)
• AWS Certification
• ITIL v4 Certification
• Strong understanding of IT operations, security, and business intelligence.
• Good team player with a strong willingness to help others
• Experience scripting in the following preferred:
• Python, Perl, and JavaScript in relation to Splunk Apps/Add-ons
• SQL for querying structured data
• Knowledge of XML and JSON for data handling
• Splunk Search Processing Language (SPL) for data analysis in Splunk