Splunk Administrator

Description:

Job Title: Splunk Administrator

Location: Remote ( First Week onsite at Portsmouth NH, later remote ) ( travel expense paid )

Start Date: ASAP

Clearance required by project: Top Secret

Certification required: CompTIA SEC+

Education: BS in IT, Cyber, CS, IS or DS

Requirements:

Splunk Administration:

The contractor shall provide management, configuration, administration, implementation, and optimization of SUBMEPP’s SPLUNK infrastructure and all supported systems throughout the SUBMEPP enclave. The contractor shall manage technologies and processes to sustain and or improve the performance of the SPLUNK environment. The contractor shall configure servers and modify host/agent files in conjunction with DISA STIG, DoD policies, and Vendor best practices. At minimum the contractor shall be required to perform the following tasks in support of the task:

Provide support, monitor, and take corrective action as necessary in support of SPLUNK infrastructure.

Provision SUBMEPP’s SPLUNK systems to support of necessary scanning requirements.

Design, plan and implement sound systems infrastructure strategies.

Support the SPLUNK systems development, planning, deployment, data management, and disaster recovery planning best practices and testing.

Perform all security patching of host systems in compliance with IAV updates, ACAS reporting and Vendor best practices.

Provide backup, recovery and archiving of all host systems configurations via SUBMEPP’s data protection solution.

Perform and enable controls to ensure the virtual infrastructure security posture maintains compliance with DISA STIGs and DoD SUBMEPP regulations.

Provide systems, performance monitoring and traffic monitoring via weekly reports provided to SUBMEPP management.

Document incidents using the SUBMEPP ticket tracking system and Knowledge Base articles are published when applicable.

Maintain existing and create new WP in support of this task.

Provide support, analysis, and incident resolution; via face-to-face, phone, email, or other electronic means IAW Section Due to the 24/7 availability requirements of SUBMEPP Information Systems in support of Navy Enterprise customers across the globe, emergent response outside of normal working hours may be required by personnel to ensure continued operations. Response outside of normal working hours is unlikely, but possible.

Candidate must have Red Hat Certified System Administrator (RHCSA) or proof of (RH124) Red Hat System Administration I Course.

Candidate should have completed:

Splunk Administrator Learning Track

Candidates must have Security+, active clearance, Splunk experience, good

communication and engagement, and be willing to travel for a week of on-boarding to PNSY.

CompQsoft provides equal opportunity in all aspects of employment and in the working environment to all employees and applicants. CompQsoft does not take any non-merit factors like race, color, religion, sex (gender), mental/physical disability, and age into account for purposes of recruitment, hiring and developmen