SRE Cyber Tools - Splunk Admin.
About The Position
Leidos is seeking a Site Reliability Engineer (SRE) Splunk Enterprise Administrator focused on cybersecurity support for the Navy’s Service Management, Integration, and Transport (SMIT) program. The program delivers core Navy-Marine Corps Intranet services, including cybersecurity services, network operations, service desk, and data transport. The role supports operations and maintenance of the enterprise network and contributes to reliable, robust, and scalable production services. Within the SRE organization, the position develops and executes tests for system resilience, performance under load, and failure scenarios, and collaborates with SREs and development teams on automated testing frameworks. As a Splunk administrator, the role supports mission-critical cybersecurity operations by administering distributed Splunk Enterprise platforms across hybrid cloud and on-premises environments. Responsibilities include platform operations, performance and ingestion monitoring, data onboarding support, incident troubleshooting, security compliance, documentation, and modernization in an Agile/DevOps environment. Success is measured by improved reliability against service level objectives (SLOs), reduced mean time to recovery (MTTR), comprehensive automated test coverage, timely resolution of performance bottlenecks, CI/CD integration of automated testing, and improved system scalability and performance under load. The position is onsite at Norfolk Naval Station, Monday through Friday on day shift, and includes after-hours support and an on-call rotation as required.
Requirements
- Ability to work onsite at Norfolk Naval Station Monday through Friday on day shift.
- Bachelor of Science degree with 8–10 years of prior relevant experience, or a master’s degree with 7 years of prior relevant experience.
- U.S. citizenship and an active Secret Security Clearance.
- Minimum DoD 8570.01 IAT Level II certification.
- Splunk Enterprise Certified Admin or Splunk Cloud Certified Admin certification.
- At least 3 years of experience administering Splunk Enterprise v9 and supporting distributed Splunk architectures in hybrid cloud and on-premises production environments.
- Experience administering and troubleshooting Red Hat Enterprise Linux (RHEL) 8 and/or RHEL 9 servers.
- Experience with STIGs, the Risk Management Framework (RMF), vulnerability management, and compliance frameworks.
- Experience developing and maintaining operational dashboards, visualizations, and executive reporting in Splunk Enterprise and Splunk Cloud.
- Strong working knowledge of Splunk data ingestion pipelines, indexing, parsing, forwarding, search optimization, and retention management.
- Experience using at least one scripting or automation language: Python, Bash, or PowerShell.
- Strong troubleshooting, analytical, communication, documentation, and problem-solving skills.
- Ability to work independently, manage competing priorities, collaborate across technical teams, and maintain a customer-focused approach in a high-tempo production environment.
- Ability to work in a team environment.
Nice To Haves
- Experience with automated script design, coding, debugging, and maintenance using Bash, Python, or similar tools.
- Experience working in classified government or Department of Defense environments.
- Familiarity with RHEL 10 NGEN.
Responsibilities
- Administer, maintain, and perform daily operations and maintenance for distributed Splunk Enterprise environments, including Search Heads, Indexers, Heavy Forwarders, Intermediate Forwarders, Universal Forwarders, and Deployment Servers across hybrid cloud and on-premises infrastructure.
- Monitor platform health, data ingestion, indexing throughput, search performance, and retention utilization.
- Troubleshoot data onboarding, parsing, field extraction, forwarding, indexing, and ingestion issues.
- Support Splunk Cloud integrations and related hybrid operational activities.
- Maintain Splunk applications, dashboards, alerts, saved searches, and knowledge objects.
- Support patching, vulnerability remediation, Security Technical Implementation Guide (STIG) compliance, and system hardening.
- Support platform upgrades, migrations, infrastructure modernization, technology refresh, and automation initiatives using scripting and configuration-management tools.
- Participate in incident response, outage troubleshooting, problem resolution, and root cause analysis.
- Maintain operational documentation, architecture diagrams, runbooks, and standard operating procedures (SOPs).
- Coordinate with cybersecurity, network, server, engineering, and customer teams during operational and modernization activities.
- Develop and execute tests focused on system resilience, performance under load, and failure scenarios.
- Collaborate with SREs and development teams to create automated testing frameworks that simulate real-world conditions and validate system behavior under normal and stress conditions.
- Participate in after-hours support and an on-call rotation as required.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
