Splunk Developer

**** IRS Minimum Background Investigation MBI/ 58C Tier 2RS clearance required. Permanent Resident or U.S. Citizenship required for MBI/58C Tier 2RS. No exceptions. ****
**** This is a one-year contract with possible extension(2).
TriTech Enterprise Systems is seeking a part-time, remote " Splunk Developer" to support a federal client. This position could require overtime, weekend work, travel and/or access to personal data. A clearance is required. The Splunk Developer must have advanced dashboarding skills. Someone who can act as their own project manager to manage the user requirements and follow up on related tasks. 
Primary Duties:

• Development of dashboards within the Splunk platform, utilizing Splunk SPL queries, reports, dashboards, visualizations, and alerts. 80%
• Developing business metrics and server metrics dashboards. 5%
• Create and maintain technical documentation related to dashboard components: XML, macros, saved searches, etc. 3%
• Using Knowledge of Splunk Configuration Files (indexes.conf, props.conf, transforms.conf, output.conf, inputs.conf, and servers.conf) interact with other groups who install and maintain the Splunk server infrastructure. 3%
• Configuration of Splunk DB Connect App (Identities and Connections). 3%
• Create scheduled alerts using cron expressions with specific time ranges. 3%
• Dashboard code packaging and deployment from DEV to PROD or other environments. 3%

Required Skills/Level of Experience:

• Six to ten years IT technical experience with five or more years' experience developing advanced token-controlled Splunk dashboards using Simple XML, HTML and CSS.
• Experience in gathering requirements from application teams and creating advanced Splunk dashboards - 6 years
• Experience in writing complex Splunk searches for alert, reports and dashboards - 6 years
• Experience in Splunk data ingestion from database tables, application logs and static sources such as CSV and JSON files - 6 years
• Experience with understanding and customizing SQL queries - 6 years
• Knowledge on constructing Splunk friendly regex expressions - 6 years
• Experience in Optimizing Splunk search queries to obtain optimal performance - 6 years
• Experience using Splunk or other tool(s) for storage projections - 2 years

Preferred Skills:

• Splunk administrator certifications
• Splunk power user/Advanced power user/developer certifications
• Experience applying AI and Machine Learning tools, such as Splunk Machine Learning Toolkit to troubleshooting of business IT applications
• Experience in performance tuning and capacity planning in a Linux and SAN Storage infrastructure
• Experience using 3 or more of the following Splunk Technologies:
  
  • Splunk DB Connect, Lookup Editor, Splunk Machine Learning Toolkit, Splunk REST API,
  • Oracle SQL, Splunk Federated Index implementation, Data Analytics, Splunk Unix and Linux Add-on,
  • Splunk WebSphere Application Add-on, Advanced Regex based log parsing

The candidate will be supporting the MeF platform. MeF electronically files 'tax returns' with the IRS. It provides SOA based web services that filers use to submit returns and provides web applications for IRS users to work with the returns. MeF validates filed returns, determines their disposition, and interfaces with other IRS systems for downstream processing of the returns. 
TriTech is an equal opportunity employer.