Copper River Cyber Solutions is seeking a Splunk Administrator to join our team in support of a new contract at the Department of Health and Human Services Administration for Strategic Preparedness and Responsiveness. This position will be performed remotely with the occasional need for an onsite meeting in the Washington D.C. area.

The Splunk Administrator is responsible for the Splunk high-level architectural expertise to managers and technical staff. Develops architectural products and deliverables for the enterprise and operational business lines. Develops, architects, designs, and provides strategy for technical solutions and the infrastructure architecture/design required to support task order mission objectives. 

Responsibilities (include but are not limited to):

• Developing saved searched use cases for SOC using multiple regulatory frameworks
• Designing dashboards, alerts, and reports for each required use case
• Developing automated controls
• Supporting Splunk deployment, configuration, administration, and architecture
• Providing Cybersecurity and Threat Analyst services to support active cybersecurity incidents and events from the new Logging and Event Management
• Supporting analysis and logging of Firewall event
• Configure firewall devices, rule sets, implement new and replacement firewall devices as well as provide 24 hours a day, 7 days a week and 365 days a year support for firewall maintenance and operations
• Initiate, maintain, and support all current and future transfers of log data such as Firewalls, IDS, IPS, DNS, DHCP, Web Proxy, Anti-Virus and SMTP (IronPort as needed)
• Evaluate communication security, data vulnerability, business continuity and compliance risks along with vulnerabilities/weaknesses in systems
• Examine employee compliance with security controls and deficiencies, security policy, processes and procedures for completeness, and ensure that controls are adequate to protect sensitive information systems
• Provide additional training services to the staff as requested
• Producing documentation for the Splunk architecture, including network port connectivity, and design choices of the associated applications
• Implement process and quality improvements through task automation
• Producing quality documentation

Requirements:

• Clearance:
• Ability to obtain a Public Trust clearance

• Education:
• Bachelors degree or prior, relevant experience in lieu of a degree
• Splunk Enterprise Certified Admin
• Experience:
• Minimum of 3 years’ experience
• Splunk experience and knowledge
• Experience producing quality documentation
• Experience working with Federal government clients

• Preferred Skills:
• Splunk knowledge and experience
• Cyber Security knowledge and experience
• Cloud knowledge and experience
• Networking knowledge and experience
• VMWare knowledge and experience a plus
• Microsoft 365 knowledge and experience a plus
• Platform and data migration knowledge and experience a plus