System Support: Splunk and Linux- US CITIZENS ONLY - TS/SCI FS POLY REQUIRED

• The Contractor shall maintain clustered Splunk infrastructure, including search head and index cluster, deployment server, deployer, license manager, heavy and universal forwarders, Distributed Management Console (DMC)
• The Contractor shall onboard new data sources, monitor the health of existing data feeds.
• The Contractor shall deploy and manage Splunk apps, including writing custom apps where needed.
• The Contractor shall design and implement data flow and accesses across different networks and system interfaces, for example between Splunk and AWS, or between Splunk and network devices.
• The Contractor shall perform routine maintenance tasks such as adding or deleting indexes, sizing volumes, adding data inputs, patching the OS and upgrading Spunk, automation of routine tasks.
• The Contractor shall troubleshoot data flow interruptions, data quality issues, performance issues.
• The Contractor shall collaborate with other functional teams such as network, storage, security to provide Splunk service where needed across entire customer network
• The Contractor shall document architecture, how-to guides, troubleshooting documents.
• The Contractor shall create dashboards to assist stakeholders with troubleshooting, managing data feeds status, and managing audit logs from applications.
• The Contractor shall collect information for reporting on hosted systems.

required skills and demonstrated experience

• Demonstrated experience working with Splunk and Linux.
• Demonstrated experience understanding Splunk distributed architecture and data pipelines, with hands-on implementation.
• Demonstrated experience with Splunk client management and apps management.
• Demonstrated experience with integrating Splunk with various data sources such as syslog, flat files, databases, APIs, cloud platform logs, HEC endpoints.
• Demonstrated experience with Splunk SPL to create searches, reports, alerts, and dashboards.
• Demonstrated experience with Splunk conf files to manage inputs, props, transforms, and similar.
• Demonstrated experience with fluency with Linux OS (RHEL or Rocky 8) and Command Line Interface (CLI)
• Demonstrated experience with scripting languages such as Bash, Python.
• Demonstrated experience with powershell for task automation.
• Demonstrated experience with custom apps development.
• Demonstrated experience with Regular Expression.
• Demonstrated experience with AWS SDK and CLI to programmatically interface with AWS.

Highly Desired skills and demonstrated experience

• N/A

Place of performance

Full Time Equivalent (FTE) Level

Transitioning Existing work or new Requirement

TRAVEL