Specialist, Network Plan Engineer-Splunk Administrator/Analyst

L3Harris Technologies•San Antonio, TX

1d•Onsite

About The Position

L3Harris is seeking a Splunk Administrator/Analyst for its San Antonio, Texas site. The role manages and maintains a distributed Splunk installation, with a focus on event log management, custom app creation, diagnostics, and deployment and optimization in Microsoft Windows and Linux environments. The position resolves technical issues, improves system performance, and maintains the integrity and efficiency of the Splunk environment. It allows for a degree of creativity and latitude and reports to the engineering site manager and operations manager. Remote work is not allowed. The role provides network support services for a Department of Defense Senior Leader Network and supports subscriber aircraft on live missions. It also serves as a point of entry for RF field support and corrective maintenance actions. The position requires an active Top Secret clearance with SCI eligibility and a Security+ certification.

Requirements

Bachelor’s degree and a minimum of 4 years of prior relevant experience; or a graduate degree and a minimum of 2 years of prior related experience; or, in lieu of a degree, a minimum of 8 years of prior related experience.
Active Top Secret clearance with eligibility for SCI.
Security+ certification.
Hands-on expertise deploying and optimizing Splunk in Microsoft Windows and Linux environments.

Nice To Haves

Hands-on experience designing, configuring, and deploying Splunk in an enterprise environment.
Splunk Certified Administrator certification.
Experience with multi-site index clustering, search head peers, and forwarder deployments.
Expertise in event log management, data parsing, and syslog data management.
Skill creating custom Splunk apps, dashboards, and reports.
Experience managing SSL certificates for Splunk traffic.
Proficiency in Splunk search language and troubleshooting tools.
Experience with PowerShell, Python, Visual Basic, or C++.
Strong understanding of security controls, particularly in a federated environment.

Responsibilities

Provide network support services for a DoD Senior Leader Network, using discretion and independent judgment to capture corrective actions and resolve incidents promptly.
Architect, configure, deploy, and customize an enterprise-level Splunk environment.
Manage multi-site index clustering, search head peers, and universal and heavy forwarder deployments.
Implement and maintain distributed Splunk installations, including cluster master configuration and deployment server management.
Add data sources and perform complex data parsing, including regular expressions and index-time and search-time processing.
Create custom Splunk apps, searches, alerts, dashboards, custom JavaScript visualizations, views, and reports.
Design and implement knowledge object and access control standards across the Splunk environment.
Troubleshoot and resolve errors in the Splunk stack.
Manage SSL certificates for Splunk traffic, including their creation, renewal, and configuration.
Use advanced Splunk search language to query and correlate data from multiple sources.
Migrate existing operational processes to Splunk for automation and efficiency.
Document procedures and create Standard Operating Procedures for Splunk operations.
Collaborate with the security team to improve visibility and incident response through Splunk integration.
Maintain proficiency training according to prescribed and posted network training guidelines.
Provide Tier I/II engineering support to subscriber aircraft on live missions and serve as a point of entry for RF field support and corrective maintenance actions.