GCYber is seeking a Senior Splunk Administrator, to support a high-profile government customer. This is a hands-on administration role responsible for data ingestion, dashboard development, and resolving issues when data is missing, delayed, duplicated, or incorrectly parsed.
As the Senior Splunk Administrator, you will:
- Administer and monitor an enterprise Splunk environment, including indexer clusters, search head clusters, heavy and universal forwarders, deployment servers, deployers, cluster managers, and monitoring consoles.
- Troubleshoot missing, delayed, duplicated, incorrectly parsed, or incorrectly routed data across the complete ingestion path.
- Configure and maintain Splunk inputs, outputs, indexes, sourcetypes, routing, filtering, timestamp extraction, and event parsing.
- Build and maintain Splunk dashboards, reports, alerts, and saved searches that provide useful operational and cybersecurity visibility.
- Work with stakeholders to define dashboard requirements, identify the right data, and present results in a clear and actionable format.
- Develop and optimize SPL searches that support dashboards, data validation, troubleshooting, trend analysis, and operational reporting.
- Diagnose issues involving forwarders, blocked queues, certificates, network connectivity, indexing, permissions, dashboards, and search logic.
- Active DoD Top Secret/SCI clearance
- Active IAT II certification (i.e., Security+, CySA+, CCNA-Security, GSEC, CND, GICSP, SSCP)
- Bachelor’s Degree in Computer Science, Cybersecurity, Computer. Engineering, Information Technology, or equivalent degree
- 5+ years of Splunk administration or engineering experience.
- Hands-on experience supporting a distributed enterprise Splunk environment
- Experience with indexer clusters, search head clusters, heavy forwarders, universal forwarders, deployment servers, and related Splunk components.
- Splunk certification preferred
Skills Required
- Active DoD Top Secret/SCI clearance
- Active IAT II certification, such as Security+, CySA+, CCNA-Security, GSEC, CND, GICSP, or SSCP
- Bachelor's degree in Computer Science, Cybersecurity, Computer Engineering, Information Technology, or an equivalent field
- At least 5 years of Splunk administration or engineering experience
- Hands-on experience supporting a distributed enterprise Splunk environment
- Experience with indexer clusters, search head clusters, heavy forwarders, universal forwarders, deployment servers, and related Splunk components
- Splunk certification
What We Do
GCyber was founded to create innovative information technology solutions for the federal, state, and commercial markets. GCyber engineers have provided professional services supporting the information technology industry for over 15 years. Along with our engineering staff, we have relationships with partners, vendors, and analysts who have specialized expertise in the federal market. GCyber’s broad experience, focus toward execution with measurable results, and commitment to innovation provide responsive and long-lasting solutions to our customers. It is the mission of GCyber to always remain focused on our customer’s goals and improving their existing landscape. Our company accomplishes this by focusing on opportunities for innovation, while remaining mindful of industry successes and failures in the deployment of technologies. If your road map needs increasingly innovative solutions, GCyber can help you get there.
.png)
