Splunk Cloud Administrator

Gunnison Consulting Group • Washington, DC

2d • $100,000 - $116,000

About The Position

This position is contingent upon a future opening with Gunnison. The Splunk Cloud Administrator will support IT and cybersecurity operations for the CDC by designing, implementing, and managing Splunk Enterprise environments across on-premises, MSP, and cloud infrastructures. This role enables enterprise security monitoring, data integration, automation, and compliance activities for the CDC’s Cybersecurity Program Office (CSPO).

Requirements

• Expert Splunk Cloud/Enterprise administration for large-scale environments; strong SPL, Splunk architecture, CLI management (Linux and Windows), API, ETL, AWS/Azure skills.
• Knowledge of cybersecurity tools, databases, FISMA, vulnerability management, Zero Trust, CDM, and GRC platforms.
• ServiceNow, Archer, and Jira familiarity.
• Strong communication, documentation, analysis, and teamwork capabilities.
• Splunk Cloud Certified Admin.
• Ability to obtain and maintain a Public Trust.

Nice To Haves

• Federal or healthcare sector experience; CDC/HHS experience.
• NIST knowledge.
• Splunk Enterprise Security (ES) Admin.
• Splunk ITSI Admin.
• Cribl.
• CISSP.
• Security+.
• Armis.

Responsibilities

• Write and optimize advanced SPL queries for monitoring, reporting, and troubleshooting.
• Manage data ingestion, indexing, and forwarding for internal teams and customers from cloud, server, application, and endpoint sources.
• Configure and support Splunk forwarders though Splunk deployment servers in conjunction with Syslog-NG, Cribl, AWS Lambda, and Azure Function Apps for reliable data intake.
• Create dashboards, visualizations, reports, and alerts for both technical and business users.
• Automate operational tasks and data processes using Python, Bash, and PowerShell.
• Support Splunk environments in both self-hosted and Splunk GovCloud deployments.
• Integrate Splunk with enterprise platforms including Archer, ServiceNow, Azure, and AWS.
• Troubleshoot platform infrastructure, networking, and security-related issues impacting data visibility and performance.
• Troubleshoot and implement role-base access controls with SAML in Splunk.
• Custom app development, vetting, and deployment to on-premises and Splunk Cloud instances.
• Apply Splunk AI Toolkit for use cases such as anomaly detection, forecasting, clustering, and predictive analytics.
• Contribute to monitoring and visibility for AI application stacks, including LLMs and related infrastructure, when needed.

Benefits

• 3 weeks of Personal Leave your first year
• 11 paid Holidays each year
• 5 days of Flexible Time Off each year for approved training or certifications (self-study is ineligible)
• 401(k) company match at 50% up to 10% of your salary
• Medical, Dental and Vision Insurance
• Life and Disability Insurance
• Public Transportation Subsidies
• Certifications and Training Allowance - Up to $5,000/year!

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed