100% REMOTE position for a Splunk Engineer for a new federal contract to work with the prime contractor on a solution that will solve a federal agency-s security log collection requirements. The US Access network currently consists of the following:
- 200 Windows/Linux servers in place today
- 35 networking devices (firewalls, load balancers, switches)
- 600+ field routers with windows 10 workstations attached.

The position is 100% remote, but the selected engineer must reside within EST or CST time zones. The initial contract term is 6 months with the a strong potential to extend based on job performance.

Below is an overview of what will need to be accomplished:

- INITIATING & PLANNING: our client's team will use the planning and design phase to capture all necessary aspects of the solution upgrades or verify that changes are compatible with the existing environment and will not affect capability and operation of the affected infrastructure.
- EXECUTING MILESTONES: Upon successful planning of the engagement, the assigned engineer will begin the necessary tasks to complete the desired changes within the customer environment.
- INDEX AND RETENTION PLANNING WORKSHOP: Creation and documentation of a strategy for index definition and data retention.
- INSTALL SPLUNK INSTANCES: Implement Splunk Enterprise instances within Customer environment.
- IMPLEMENT SPLUNK UF: Enable collection of data using Splunk Universal Forwarder ("UF")
- DISTRIBUTED SEARCH: Configure distributed search connections to enable searches to flow between Search Heads and Indexers
- CONFIGURE DEPLOYMENT SERVER: Configure the deployment server for Splunk Universal Forwarder configuration
- CONFIGURE RBAC: Assist with configuration of Splunk Enterprise Role Based Access Control ("RBAC")
- CONFIGURE LDAP: Assist with configuration of a Splunk Enterprise LDAP connection for Role Based Access Control ("RBAC")
- CONFIGURE INDEXES: Splunk will configure Splunk indexes to ingest Customer data.
- INSTALL APP(S): Installation of Splunk Application(s) on Splunk Search Head(s).
- SPLUNK MONITORING CONSOLE: Install and configure the Splunk Monitoring Console for Splunk best-practice visibility into the Splunk architecture and performance.
- IMPLEMENT SPLUNK CONNECT FOR SYSLOG: Assist Customer with implementation of Splunk Connect for Syslog ("SC4S")
- DATA ONBOARDING USING A SPLUNK APP OR TA: STANDARD: Deploy and configure Splunk Apps and Technology Add-Ons ("TAs").
- DATA ONBOARDING USING A SPLUNK APP OR TA: (ADVANCED): Deploy and configure advanced Splunk Apps and Technology Add-Ons ("TAs")

COVID-19 Considerations:
Please be aware that this position is supporting a company that is contracted to do business with the federal government. As such, under the recent Presidential Executive Order on Requiring Coronavirus Disease 2019 Vaccination for Federal Employees, which requires all federal workers and contractors doing business with the federal government to be fully vaccinated, all candidates seeking employment consideration for this position must be fully vaccinated.

Required Skills

- Must be US Citizen per gov't requirement
- Must be able to obtain a gov't Public Trust
- BS degree
- 5+ years Splunk experience.
- Splunk certification is a PLUS
- Experience implementing Splunk Instances
- Experience with LDAP
- Experience with Splunk Universal Forwarder ("UF")
- Experience with Splunk Enterprise Role Based Access Control ("RBAC")
- Experience with implementing Splunk Connect for Syslog ("SC4S")