Splunk Platform Engineer

BNH•San Marcos, TX

5d•$91,000 - $147,000•Onsite

About The Position

Beyond New Horizons, LLC (BNH) has an exciting opportunity for a Splunk Platform Engineer supporting TOS II at Arnold Air Force Base, Tennessee. As a Splunk Platform Engineer, you will serve as a member of an integrated team responsible for the design, administration, operation, security, and sustainment of the Splunk Enterprise platform and its supporting Linux-based infrastructure for United States Air Force Test Operations and Sustainment efforts. Beyond New Horizons, LLC (BNH) is the team selected by the U.S. Air Force to conduct Test and Operations Sustainment at the Arnold Engineering Development Complex (AEDC) at Arnold Air Force Base in Tennessee. AEDC operates more than 55 aerodynamic and propulsion wind tunnels, rocket and turbine engine test cells, space environmental chambers, arc heaters, ballistic ranges and other specialized units located in six states. Many of the complex's test units have capabilities unmatched elsewhere in the United States; some are unique in the world. AEDC is one of three installations which are part of the Air Force Test Center (AFTC), one of six subordinate commands of the Air Force Materiel Command organization, and an important national resource. AEDC’s mission is to conduct developmental test and evaluation for the Nation through modeling, simulation, and ground and flight tests. Execution of the mission requires a large team of highly qualified and dedicated professionals from multiple technical disciplines to effectively accomplish the objectives of our test customers. BNH currently has an exciting career opportunity available for a Splunk Platform Engineer to join our team at Arnold Air Force Base in Tennessee.

Requirements

Bachelor’s degree in IT-related field (or 4 years of IT-related experience in lieu of a bachelor’s degree) AND 5 years of progressive experience in IT-related field.
Must be able to obtain and maintain a Department of Defense Secret level security clearance and access to the AEDC local area network.
Due to Air Force Security requirements, U.S. Citizenship is required for employment at Arnold Air Force Base.

Nice To Haves

Experience administering Splunk Enterprise in a DoD environment.
Splunk Core Certified Power User, Splunk Enterprise Certified Admin, Splunk Enterprise Certified Architect, or comparable current Splunk certification.
Experience administering Red Hat Enterprise Linux or comparable enterprise Linux operating systems.
Experience administering distributed Splunk architectures, including indexer clusters, search-head clusters, deployment servers, cluster management, universal forwarders, heavy forwarders, and license management.
Demonstrated experience creating and optimizing SPL searches, dashboards, reports, alerts, data models, lookups, field extractions, knowledge objects, and role-based access controls.
Experience onboarding and normalizing data from operating systems, applications, databases, network devices, cybersecurity tools, cloud services, or enterprise infrastructure.
Experience with Splunk Enterprise Security, Splunk IT Service Intelligence, Splunk SOAR, Common Information Model, or other Splunk premium applications and add-ons.
Experience configuring authentication and authorization integrations, such as Active Directory, LDAP, SAML, multifactor authentication, certificates, and role-based access controls. Splunk uses roles and capabilities to govern access to platform resources such as indexes, dashboards, and apps.
Experience with Splunk app and add-on deployment, configuration management, app lifecycle support, and compatibility testing.
Experience implementing and assessing DISA STIGs, including automated compliance assessment, remediation tracking, exception documentation, and configuration-baseline management.
Experience with Risk Management Framework activities, ACAS, vulnerability management, security control assessments, and audit remediation.
Experience with enterprise storage, backup and recovery, virtualization, networking, DNS, load balancing, firewalls, and public key infrastructure.
Proficiency with automation and scripting tools, including Ansible, Bash, Python, PowerShell, REST APIs, and Git-based configuration control.

Responsibilities

Administer and sustain Splunk Enterprise infrastructure, including installation, configuration, patching, upgrading, backup, recovery, and lifecycle management of Splunk components and supporting operating systems.
Perform Linux system-administration tasks required to support Splunk instances, including account and permission management, file systems, storage, services, process management, certificates, DNS, time synchronization, operating-system patching, performance tuning, and troubleshooting.
Configure, operate, and maintain Splunk Enterprise components, including search heads, indexers, deployment servers, forwarders, license management, cluster-management functions, and supporting applications, as applicable to the environment.
Monitor the health, availability, performance, storage capacity, indexing throughput, search performance, license consumption, and resource utilization of Splunk infrastructure; identify trends and implement corrective or preventive actions.
Configure and manage Splunk data ingestion, including universal and heavy forwarders, inputs, outputs, index routing, parsing, field extraction, sourcetypes, data retention, and index configuration.
Administer Splunk users, roles, authentication integrations, role-based access controls, indexes, knowledge objects, dashboards, reports, alerts, saved searches, lookups, and data-model permissions.
Develop, maintain, and optimize Splunk Search Processing Language (SPL) searches, dashboards, alerts, reports, and other knowledge objects to support operational, cybersecurity, infrastructure, and customer requirements.
Install, configure, test, upgrade, and maintain Splunk apps and add-ons; manage app compatibility, dependencies, configuration deployment, and change control.
Implement and maintain automation for Splunk and supporting infrastructure using scripting and configuration-management tools such as Bash, Python, PowerShell, Ansible, and Git-based workflows.
Apply, validate, document, and remediate applicable Security Technical Implementation Guide (STIG) requirements for Splunk, Linux operating systems, and supporting infrastructure in accordance with program security and authorization requirements.
Perform vulnerability remediation, security hardening, log-review support, configuration-baseline management, and audit support for Splunk infrastructure.
Maintain system diagrams, configuration records, runbooks, standard operating procedures, backup and recovery procedures, and troubleshooting documentation.
Partner with cybersecurity, network, server, storage, application, and customer teams to troubleshoot data-collection, access-control, performance, and integration issues.
Ability to communicate technical findings and recommendations clearly to technical teams, leadership, and customers.
Participate in maintenance windows and provide after-hours support for critical infrastructure incidents when required.
Perform other duties as assigned.