Job Description
Job Description
SENIOR SPLUNK ENGINEER
MILITARY FRIENDLY & PREFERRED - HOH SPONSOR
Zermount seeks a Senior Splunk Engineer who is accomplished at architecting the platform, recognizing and onboarding new data sources, deploying functionalities across an enterprise, developing content for disparate user communities, analyzing platform performance trends, administering infrastructure, and guiding clients into modern methods of leveraging Splunk for security use cases and beyond.
RESPONSIBILITIES :
- Architect, implement, configure, maintain, administer, upgrade, and troubleshoot Splunk Enterprise
- Onboard, ingest, parse, normalize, and troubleshoot new data sources
- Work with disparate machine data such as network traffic, application logs, databases, cloud sources, etc.
- Install, configure, upgrade, and troubleshoot Splunk Apps and Add-ons
- Administer and troubleshoot Splunk server infrastructure (RHEL)
- Monitor Splunk performance, connectivity, license usage, and overall health
- Support and extend the Splunk platform with apps, add-ons, and knowledge objects
- Develop searches, reports, and dashboards for internal and external users
- Work with stakeholders, leadership, SOC personnel, and other users to establish requirements and targets
- Translate business needs and goals into functional, architectural, and deliverable requirements
- Track work efforts via Request / Incident tickets and Kanban tasks
- Work with program / project leadership to accurately update high-level efforts
REQUIRED :
5 years of deploying, engineering, and administrating Splunk EnterpriseSplunk Certified Administrator CertificationSplunk Certified Architect CertificationExperience with engineering and administrating multi-site-clustered SplunkExperience with configuring Splunk .conf files on a Linux terminalExperience configuring syslog-ng from scratch on RHEL SELinuxExperience with Splunk DB Connect and custom SQL queriesCLEARANCE :
Must be able to pass a Minimum Background InvestigationPREFERRED :
Splunk Core Consultant CertificationLinux Administration CertificationCribl CertificationExperience with custom integrations written in Python, Bash, or PowerShellExperience with custom front-end development in JavaScript and ReactExperience with administering and engineering Cribl distributed deploymentsExperience using Cribl to consolidate data sources and trim unnecessary Splunk license usage