Splunk Engineer

Summary

Join True Zero Technologies, a veteran-owned small business and a Best Place to Work, as a Splunk Engineer. You will be part of a team maintaining various clients' Splunk instances, focusing on data onboarding, content development, reporting, and visualizations. This role requires extensive Splunk experience, specific certifications, and strong teamwork skills. True Zero offers a collaborative environment, access to a comprehensive knowledge base, and various professional development opportunities. As a consultant, you will enjoy competitive benefits, including comprehensive health insurance, paid time off, retirement plan, and more.

Requirements

• Possess prior Splunk engineering and administration experience
• Meet the necessary certification prerequisites
• Secret Clearance
• Splunk Enterprise Certified Consultant
• Splunk Enterprise Security Certified Admin
• Splunk IL5 Cloud/ES Experience
• Experience designing and implementing ground up distributed Splunk installations including all Splunk server roles (Search Head, Indexers, Heavy Forwarders and Universal Forwarders, etc.)
• Experience with advanced configuration of Splunk including Indexer Clustering and Search Head Clustering
• Experience maintaining and administering enterprise Splunk implementations
• Experience developing custom Splunk content including scheduled searches, reports, dashboards, etc
• Proficient at data on-boarding activities including custom parsing rules, custom Technology Add-On building according to Splunk's Common Information Model (CIM)
• Experience configuring indexes, index routing, retention policies, etc
• Experience working in linux and windows environments
• Ability to configure Storage subsystems (I.e. partitioning, Volume Groups, Logical Volumes, etc.)
• Ability to configure SELinux
• Familiarity with different flavors of Linux distros (RedHat, CentOS, Ubuntu, etc.)
• Ability to configure File Permission Settings (linux/windows)
• Excellent written and oral skills, ability to work closely with multiple customers, manage expectations, and track engagement scope

Responsibilities

• Maintain various client's Splunk instances
• Focus on data on-boarding
• Develop content
• Create reports
• Develop visualizations
• Work well in a team environment

Preferred Qualifications

Backgrounds supporting federal customers

Benefits

• Competitive salary, paid twice per month
• Best in class medical coverage
• 100% of medical premiums covered by True Zero
• Company wide new business incentive programs
• Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.)
• 3 weeks of PTO starting + 11 Paid Holidays Annually
• 401k Program with 100% company match on the first 4%
• Monthly reimbursement of Cell Phone and Home Internet costs
• Paternity/Maternity Leave
• Investment in training and certifications to broaden and deepen your technical skills