Splunk Engineer Consultant

Summary

Join True Zero Technologies, a veteran-owned small business and a Best Place to Work, as a Splunk Engineer. You will be part of a team maintaining various clients' Splunk instances, focusing on data onboarding, content development, reporting, and visualizations. This role requires extensive Splunk engineering and administration experience, specific certifications, and strong teamwork skills. True Zero offers a collaborative environment, access to a comprehensive knowledge base, and various professional development opportunities. As a consultant, you will enjoy competitive benefits, including comprehensive health insurance, paid time off, retirement plan, and more.

Requirements

• Possess prior Splunk engineering and administration experience
• Meet the necessary certification prerequisites
• Hold Splunk Core Consultant Certification
• Hold Splunk Enterprise Security Accreditation
• Have experience designing and implementing ground up distributed Splunk installations including all Splunk server roles (Search Head, Indexers, Heavy Forwarders and Universal Forwarders, etc.)
• Have experience with advanced configuration of Splunk including Indexer Clustering and Search Head Clustering
• Have experience maintaining and administering enterprise Splunk implementations
• Have experience developing custom Splunk content including scheduled searches, reports, dashboards, etc
• Be proficient at data on-boarding activities including custom parsing rules, custom Technology Add-On building according to Splunk's Common Information Model (CIM)
• Have experience configuring indexes, index routing, retention policies, etc
• Have experience working in linux and windows environments
• Be able to configure Storage subsystems (I.e. partitioning, Volume Groups, Logical Volumes, etc.)
• Be able to configure SELinux
• Have familiarity with different flavors of Linux distros (RedHat, CentOS, Ubuntu, etc.)
• Be able to configure File Permission Settings (linux/windows)
• Possess excellent written and oral skills
• Be able to work closely with multiple customers
• Be able to manage expectations
• Be able to track engagement scope

Responsibilities

• Maintain various client's Splunk instances
• Focus on data on-boarding
• Develop content
• Create reports
• Develop visualizations
• Work well in a team environment

Preferred Qualifications

Have a background supporting federal customers

Benefits

• Competitive salary, paid twice per month
• Best in class medical coverage
• 100% of medical premiums covered by True Zero
• Company wide new business incentive programs
• Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.)
• 3 weeks of PTO starting + 11 Paid Holidays Annually
• 401k Program with 100% company match on the first 4%
• Monthly reimbursement of Cell Phone and Home Internet costs
• Paternity/Maternity Leave
• Investment in training and certifications to broaden and deepen your technical skills