Complete remote role for Splunk Administrator for State Client

Syntricate Technologies Inc

Clemson, SC(remote)

JOB DETAILS
LOCATION
Clemson, SC
POSTED
30+ days ago
Hi,
Title: Splunk administrator
Job ID: 9801
Interview Process: 2 rounds, Zoom
Duration of the Contract: 6 months
Possibility for Extension: Yes
Work Location: Role is 100% remote
Candidate location: No SC residency required.


DAILY DUTIES / RESPONSIBILITIES:
Candidate must be able to meet all CUI Requirements.
Splunk administrator that manages the system utilizing Linux cluster and management console applications.
  • 30% – Management of daily Splunk operation systems
  • 35% – Linux administration
  • 10% – Collaborate and liaise with other units and serve as a technical resource and subject matter expert
  • 15% – Contribute to research and development projects as required
  • 10% – Train and advise less skilled systems programmers and provide expert technical assistance

Splunk Administration:

The Splunk system is installed in a Linux cluster. Admin will need a general understanding of Linux and daily verification that Splunk is running properly. Responsibilities include:
  • Creation of new indexes
  • Updating applications
  • Adding new source types
  • Adding new servers and logs to Splunk
  • Daily verification of license counts
  • Ability to create dashboards and teach others
  • Use of Splunk management console and applications

Linux Administration:

  • Understand and implement application file permissions
  • Frequently use version control (Git, Bitbucket)
  • Use configuration management tools (SaltStack, Ansible)
  • Configure and maintain Linux file systems (NFS)

Technical Resource:

  • Assist Windows and Linux admins with installing Splunk UF client
  • Verify logs are flowing to Splunk clusters
  • Provide client-side log collection support
  • Train other admins in advanced log searching techniques
  • Perform general Splunk troubleshooting

Splunk Architecture:

  • Access to the cluster to identify design deficiencies
  • Implement improvements when needed

Splunk Upgrades:

  • Universal forwarder upgrades
  • Splunk Enterprise version upgrades

REQUIRED SKILLS (RANKED):

  • 5+ years of Splunk Administration experience
  • 5+ years of Linux Administration experience
  • 5+ years of Bash scripting experience

PREFERRED SKILLS:

  • Experience working in a VDI environment

REQUIRED EDUCATION:

  • Associate’s degree or equivalent work experience

REQUIRED CERTIFICATIONS:

  • Splunk Certification

About the Company

S

Syntricate Technologies Inc