| Splunk Cyber Security SME |
Splunk Cyber Security SME (Remote)
USPS is seeking an experienced Splunk Subject Matter Expert with strong Engineering skills to join our dynamic team. The ideal candidate will be responsible for designing, deploying, and maintaining on-premises and cloud based Splunk environments to support enterprise-level monitoring, alerting, and reporting. This role demands deep expertise in Splunk system architecture, design, implementation, configuration and operational support in a hybrid on-prem Unix/Linux and cloud-based environment. Candidates must be able to collaborate across DevOps, Security, and IT teams to optimize performance, ensure data integrity, system availability and support mission-critical operations. Proven hands-on experience with a large enterprise wide Splunk environment is mandatory. Off-hours and weekend efforts for systems maintenance, upgrades and support may be required from time to time.
Required Skills:
• 5+ Years of Splunk Experience Required
• Manages knowledge objects (fields, extractions, tags, event types, lookups, workflow actions, aliases, macros, and so on) – through automations, scripting, management server functions; to include .conf and .cfg files in scope of the last four Splunk Enterprise versions
• Experience with Splunk deployment and configuration management in large-scale environments
• Proficiency in writing complex Splunk queries, dashboards, and alerts using SPL (Search Processing Language)
• Experience with REST APIs for Splunk and external system integration
• Ability to analyze and troubleshoot complex data ingestion and parsing issues
• Designing and developing an automations workflow and dashboard interface for such
• Self-starter with a service-oriented mindset who will take action, find ways to solve problems, and move projects to conclusion independently
• Strong problem-solving skills and the ability to translate research insights into practical solutions that address real-world challenges.
• Strong communication and collaboration skills with the ability to articulate complex technical concepts to both technical and non-technical audiences.
• Experience in mentoring and guiding junior researchers or team members
Preferred Skills:
• Ability to leverage the Splunk AI Assistant and other AI tools to increase accuracy and efficiency of task and other deliverables
• Advanced knowledge of Unix/Linux and/or Windows systems administration and troubleshooting
• Strong scripting skills in Bash, Python, JavaScript, SQL and PowerShell for automation and integration tasks
• Experience with Splunk upgrades, patching, and performance tuning
• Proficiency in integrating Splunk with cloud platforms (AWS, GCP, Azure)
• Understanding of security and compliance requirements and implementation of role-based access controls (RBAC) in Splunk
• Strong knowledge of logging standards and best practices across application and infrastructure layers
• Extensive knowledge of defense-in-depth principles, Network and Security architecture, network topology, IT device integrity, and common security elements.
• Executes new projects as well as data and user onboarding
• Strong understanding of IT and Cyber industry standards and technologies to include such controls governed by NIST, FISMA, and FedRamp
• Experience installing and utilizing and developing with the Splunk App for Data Science and Deep Learning.
• Experience installing and utilizing and developing with the Splunk SOAR Automation toolset
• Experience or background in the Cybersecurity, Systems/Network Administration or Observability industry
Experience:
o A minimum of eight (8) to twelve (12) years’ relevant experience.
o A degree from an accredited College/University in the applicable field of services is required. If the individual's degree is not in the applicable field then four additional years of related experience is required.
o Typically performs all functional duties independently.
o Note: Special credentials (licenses and/or certifications) may be required at the Task Order level on a case-specific basis.
Additional Provisions:
• Pass a client mandated clearance process to include drug screening, criminal history check and credit check.
• Once candidate’s resume is approved and interview passed, the agency is responsible for providing drug screening. Failure to submit the drug screening results will delay the security clearance process.
• If a candidate is given an interim clearance, continuation of employment is then based on the candidate receiving a sensitive clearance.
• All candidates must be a US Citizen or permanent status Green Card holder.
• Cannot have more than 6 months travel outside the United States within the last five years. Military Service excluded. (Exception does not include military family members.)
• All overtime must be pre-approved in writing by the client manager or his/her designated representative.
• Agency will not be reimbursed for overtime charges without previous written authorization. Authorized overtime will be reimbursed at straight time.
• The enforced dress code is business casual, i.e., collared shirt with slacks for men, no skirts above the knee for women. |
RemoteSkills:
Access Control, Amazon Web Services (AWS), Analysis Skills, Application Programming Interface (API), Architectural Design, Artificial Intelligence (AI), Automation, Bash Scripting, Best Practices, Cloud Computing, Communication Skills, Computer Security, Configuration Management, Data Quality, Data Science, Deep Learning, Defense in Depth, DevOps, Engineering, FISMA - Federal Information Security Management Act, GCP (Good Clinical Practices), Identify Issues, Industry Standards, Information Technology & Information Systems, Internet Security, JavaScript, Linux Administration, Linux Operating System, Mentoring, Microsoft Windows Azure, Microsoft Windows System Administration, Network Administration/Management, Network Architecture/Engineering, Network Security, Network Topology, Onboarding, Operational Support, Performance Tuning/Optimization, Problem Solving Skills, Python Programming/Scripting Language, REST (Representational State Transfer), Regulatory Compliance, Reporting Dashboards, Research Skills, SQL (Structured Query Language), Sales Management, Scripting (Scripting Languages), Security Architecture, Server Side Internet Programming, Software Patches, Splunk, System Architecture, System Integration (SI), Systems Administration/Management, Team Player, U.S. National Institute of Standards and Technology (NIST), USPS (United States Post Office), United States Citizen, Unix Operating Systems, Windows PowerShell
PlanIT Group
PLANIT Group is a fast-growing global technology consulting firm dedicated to delivering innovative solutions to our clients that drive results. We collaborate with our partners and customers to help them improve performance, efficiency, and quality. Our team delivers innovative solutions and services - including management consulting, systems integration, ERP solutions, enterprise architecture, communications, and infrastructure services. We focus on delivering value and driving increased productivity and efficiencies for our clients’ mission. Our extensive experience in the Federal, Defense, Intelligence, State, Local, Healthcare and Commercial industries delivers proven results and accelerated benefits.
Clients engage PLANIT for our expertise, innovative approach, and our exceptional team. We promote a creative, client-centric work environment and culture, striving to provide challenging and rewarding opportunities for our company’s employees and partners. Integrity and innovation are the core principles of our company philosophy. Our customers engage us to create solutions to complex mission challenges, and PLANIT delivers. For more information, visit Innovation. Integration. Integrity.
Company Size:
500 to 999 employees
Industry:
Government and Military
0
Website:
