Splunk Administrator w/ Linux

Resource Management Concepts, Inc. • Indian Head, MD

17d • $100,000 - $140,000

About The Position

Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America.
RMC is hiring for a Splunk Systems Administrator with a primary focus on Security Information and Event Management (SIEM) and Linux administration support for our customers in Indian Head, MD (Main Side).

Requirements

• Expertise in Linux (Red Hat, CentOS, etc.), including system administration, performance tuning, and troubleshooting
• Experience with configuring and managing Splunk distributed environments (indexers, search heads, forwarders)
• Experience with monitoring and troubleshooting Splunk performance on Linux
• Familiarity with Splunk apps, add-ons, and custom configurations
• Knowledge of Linux shell scripting (Bash, Python, etc.) for automation and system management
• Proficiency with Splunk Search Processing Language (SPL)
• Solid understanding of security best practices for Splunk and Linux systems
• Security Clearance: An Interim DoD Secret clearance is required to start. A Top Secret clearance will be required for this position. Applicant selected may be subject to a security investigation and must meet eligibility requirements for access to classified information.
• DoD 8570.01M IAT Level III certified with Continuing Education (CE) (CompTIA CASP+ CE, CISSP, or equivalent)
• Minimum of 5-10 years of experience supporting system administration for DoD or Federal Programs

Nice To Haves

• Splunk certifications (Splunk Certified Admin, Splunk Certified Power User, etc.)
• Linux certifications (RHCSA, LPIC-2, etc)

Responsibilities

• Administer, configure, and maintain Splunk Enterprise on Linux-based systems
• Install and configure Splunk forwarders, indexers, and search heads
• Design, implement, and manage Splunk infrastructure on Linux servers
• Troubleshoot and optimize Splunk performance on Linux environments, ensuring smooth and efficient operations
• Configure and manage Splunk apps, add-ons, and integrations with third-party data sources
• Monitor Splunk health, conduct regular backups, and implement disaster recovery procedures
• Collaborate with security and operations teams to define logging and monitoring strategies
• Ensure Splunk infrastructure is secure by implementing access controls, encryption, and security best practices
• Perform regular updates, patches, and upgrades for Splunk and Linux systems
• Develop and maintain automation scripts for monitoring, backups, and system configurations
• Provide support for incident response, reporting, and debugging within Splunk environments
• Assist team with performing aspects of incident response including responding to detection notices, lead investigation to include coordinating with other IT admins if needed, reporting update tickets and documenting investigation information, reporting to ISSM and supporting investigation closure in accordance to site process

Benefits

• RMC differentiates itself from other firms through its investment in our employees. We invest our resources to train, certify, educate, and build our employees.
• RMC can offer you a great place to work with a small company feel and give you the experience, tuition assistance, and certifications that will take your career to the next level.
• This also includes a competitive paid vacation package with 11 paid federal holidays.
• Additionally, we also offer high-quality, low-deductible healthcare plans, pet insurance, and a competitive 401K package.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed
• Number of Employees: 251-500 employees