Splunk Developer

Evolver Federal is looking for a Splunk Developer to join our team supporting our government client. The individual will provide engineering support for IT solutions supporting our Federal client's Continuous Monitoring Program. Leveraging existing enterprise instances, the Splunk Developer will develop and maintain a suite of tools including but not limited to Splunk Dashboards integrating existing and new data sources, Application Program Interface (API) connections with external systems, and further implement automation within the tool suite.

The Splunk Developer will also advise on methods to further evolve the automation strategy to support the client's Continuous Monitoring Program including, but not limited to, identifying opportunities for further automation to reduce manual processing, articulating the associated business case, implementing related solutions and advising on additional tools to further the client's automation strategy. The Splunk Developer will partner with Federal security tools and infrastructure management teams to administer and manage the client's application of enterprise toolsets to facilitate data ingestion, analysis, correlation, and visualizations.

Although the individual is not responsible for maintaining ownership nor overall Administrator responsibility of the enterprise security tools implemented within the client environment, they will be responsible for optimizing and maintaining the client's inputs into the enterprise security tools to support the client's Continuous Monitoring Program.

Responsibilities

• Design, develop, engineer, and implement solutions to support the client's Continuous Monitoring Program using Splunk and any other datasets and toolsets available in the client's environment.
• Design and implement functional requirements for new and existing Splunk Dashboards, consolidating data from multiple data sources internal and external to Splunk.
• Interface with Enterprise Splunk Engineering Team to share lessons learned, coordinate on data sources and data integrity, and provide availability and integrity requirements to support the Continuous Monitoring Program.
• Identify and document authoritative data sources.
• Document and execute manual data refresh procedures.
• Execute incremental and full back up procedures at pre-determined intervals.
• Participate in requirements gathering, solutions architecting, design and build of technology solutions to support the client's Continuous Monitoring Program.
• Integrate automation into the application and systems monitoring processes.
• Assist with data enrichment to improve reporting, search and dashboard capabilities.
• Evaluate enterprise security risks and identify recommendations for maturing and evolving the client's Continuous Monitoring Program to facilitate proactive identification and mitigation of risk.
• Ensure the accuracy and availability of the Continuous Monitoring Dashboards, including lookup tables, are up-to-date and operating as intended.
• Establish, maintain, and monitor the execution of scheduled jobs used to populate data within the Splunk Dashboards.
• Identify and implement new Splunk dashboards that provide the Continuous Monitoring program and Information System Security Officers with increased visibility into the risk present in government systems.
• Integrate and manage APIs with authoritative data sources.
• Develop, manage, and maintain scripts used for data ingestion.
• Act as a liaison with other Branches within the client's organization to eliminate duplication of efforts and align strategic direction of tool suites to facilitate the goals of the Continuous Monitoring Program.
• Oversee automated data feeds and manual data refresh activities, ensuring documented procedures are maintained and staff are executing internal procedures according to the documented SOPs.
• Oversee and maintain backup repository of all queries and code necessary to reinstate technical toolset to support the Continuous Monitoring Program if / as necessary.
• Implement automated alerts in Splunk, or similar tools.

Basic Qualifications

Preferred Qualifications

Evolver Federal is an equal opportunity employer and welcomes all job seekers. It is the policy of Evolver Federal not to discriminate based on race, color, ancestry, religion, gender, age, national origin, gender identity or expression, sexual orientation, genetic factors, pregnancy, physical or mental disability, military / veteran status, or any other factor protected by law.

Actual salary will depend on factors such as skills, qualifications, experience, market and work location. Evolver Federal offers competitive benefits, including health, dental and vision insurance, 401(k), flexible spending account, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies.

J-18808-Ljbffr