5-7 years of experience with Splunk architecture and components.
Skilled in developing Splunk dashboards, alerts, and reports.
Proven experience in integrating various log sources with Splunk.
Strong understanding of Splunk SPL and role-based access controls.
Familiar with SIEM concepts and security monitoring use cases.
Knowledge of networking fundamentals related to log analysis.
Proficiency in Linux and Windows administration.
Responsibilities
Design and implement Splunk Enterprise and Cloud architectures for security and analytics.
Develop and maintain comprehensive Splunk dashboards and reports.
Integrate diverse data sources into the Splunk environment.
Build data pipelines for efficient data management in Splunk.
Support threat detection use cases and compliance monitoring efforts.
Create technical documentation and maintain implementation standards.
Administer access controls and monitor Splunk performance and health.
Benefits
Comprehensive Health Insurance with PPO and HDHP/HSA options.
Dental and Vision Insurance.
Short/Long-Term Disability benefits.
Company-paid Life Insurance coverage.
401(k) Plan with Employer Match.
Paid Time Off for vacation and sick days.
Federal Holidays are paid days off.
Professional Certification Incentive Plan.
Employee Referral Program.
Exposure to cutting-edge technology projects.
Full Job Description
Senior IT Consultant - Splunk Engineerfor our client located in Montgomery, AL.
Job Overview:
Design, implement, and optimize Splunk Enterprise and Splunk Cloud architectures - including indexers, search heads, forwarders, and deployment servers - to support security monitoring, log management, and operational analytics.
Develop and maintain Splunk dashboards, alerts, reports, searches, and data models aligned to partner and mission requirements.
Integrate data sources into Splunk, including infrastructure, cloud, application, and security technologies.
Build and maintain pipelines to parse, normalize, enrich, and route data to Splunk.
Support use case development for threat detection, incident response, compliance monitoring, and operational visibility.
Create and maintain architecture diagrams, technical documentation, implementation standards, and administration procedures.
Administer role-based access controls and monitor the health, performance, and availability of the Splunk environment.
Distill complex technical concepts into accessible explanations for analysts, leadership, and non-technical partners.
Utilize strong communication and presentation skills.
Recognize, analyze, and solve a variety of problems.
Required Qualifications:
Experience in Splunk architecture, including indexers, search heads, forwarders, and deployment server.
Experience onboarding and normalizing log sources from infrastructure, applications, cloud platforms, and security tools.
Experience building pipelines to parse, normalize, enrich, and route data to Splunk.
Proficiency with Splunk Search Processing Language (SPL), data models, and role-based access controls.
Knowledge of Security Information and Event Management (SIEM) concepts, security monitoring, and threat detection use cases.
Networking fundamentals, including Transmission Control Protocol/User Datagram Protocol (TCP/UDP), Transport Layer Security (TLS), syslog transport, firewall ports, and common transport issues, as well as system log analysis.
Experience in Linux and Windows administration.
Must hold one or more of the following certifications: Splunk Core Certified Power User, Splunk Enterprise Certified Admin, or a Splunk Enterprise Security certification.
Preferred Qualifications:
Advanced Splunk certifications, such as Splunk Certified Architect or Splunk Enterprise Security Certified Admin.
Experience with Splunk Enterprise Security or Security Orchestration, Automation, and Response (SOAR) platforms.
Scripting experience (Python, PowerShell, or Bash) for automation and data onboarding.
Experience supporting SOC operations in government, higher education, or critical infrastructure environments.
Education Required:
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or other related field, plus 5 years of experience implementing, managing, and configuring Splunk Enterprise or Splunk Cloud.
Our Employees:
Are actively working on next-generation technology projects with the U.S. Department of Veterans Affairs, CDC, and a wide array of Federal, State, and Local agencies throughout the United States
Are eligible for wide-ranging benefits and perks, including but not limited to:
Comprehensive Health Insurance with PPO and HDHP/HSA options
Dental Insurance
Vision Insurance
Short/Long-Term Disability
Group Life Insurance - Company Paid
Voluntary Life Insurance
401(k) Plan with Employer Match
Paid Time Off (Vacation/Sick)
Holiday Pay - Company Paid Federal Holidays
Professional Certification Incentive Plan
Employee Referral Plan
Technology Exposure
For additional information regarding Advanced Systems Design, please check out our WEBSITEor click HERE for all current job openings.
