Splunk Software Engineer-TS/SCI with Poly

CACI•Columbia, MD

1d•Onsite

About The Position

The Splunk Software Engineer (SWE) is a Linux‑focused, highly versatile engineering generalist with strong troubleshooting, automation, and cross‑domain security experience who serves on a cross‑functional team of systems engineers. They also act as the team’s subject matter expert for Splunk applications and analytics.

Requirements

Strong Linux system administration experience, including OS installation, configuration, user and permission management, networking fundamentals, and command‑line operations.
Experience managing hardware using tools like iDRAC (or similar), including BIOS and firmware updates, RAID configuration, and basic hardware troubleshooting.
Demonstrated ability to troubleshoot complex issues across operating systems, hardware, networks, applications, and data flows.
Proficiency with core UNIX command‑line utilities for file manipulation, packaging, and transfer (e.g., tar, split, checksum tools).
Experience using Salt for configuration management or build automation, or strong adjacent experience with Ansible, Puppet, or Terraform.
Experience building, deploying, or maintaining Cross Domain Solutions (CDS) or similar high‑assurance boundary security technologies.
Experience supporting or developing Splunk applications, dashboards, data routing, and analytics as the team’s Splunk subject matter expert.
Must have experience in at least 4 of the below technologies: JavaScript, Regular Expressions (RegEx), REST services, Python frameworks, Elasticsearch or Splunk, CI/CD processes, Monitoring tools (such as Nagios or Elastic Beats), Apache NiFi, React or Angular, DevOps tools (Ansible, Salt, Docker), Cribl.

Nice To Haves

Advanced Linux expertise, including system recovery techniques, deep command‑line proficiency, including expertise with ssh/tunneling, authentication/certificates, and tools such as sed, awk, grep, rsync, and dd.
Experience performing hardware lifecycle operations such as disk replacement, RAID adjustments, firmware baselining, and remote KVM troubleshooting.
Hands‑on experience optimizing or customizing Salt states, modules, or orchestration workflows.
Experience with adjacent automation frameworks such as Ansible, Puppet, or Terraform in mixed‑tool environments.
Prior experience designing, modifying, or validating configurations and filtering rules for CDS or other high‑assurance boundary security technologies.
Experience integrating Splunk into constrained, air‑gapped, or cross‑domain environments.
Familiarity with DevOps workflows including CI/CD pipelines, version control best practices, and automated build processes.
Experience supporting distributed systems and diagnosing issues across complex data flows or multi‑system interactions.
Splunk certification in Splunk Accredited Core Implementation

Responsibilities

Serve as the team’s Linux expert, performing OS installation, configuration, user management, networking, and system maintenance.
Manage hardware using tools like iDRAC, including BIOS updates, firmware upgrades, RAID configuration, and basic hardware troubleshooting.
Troubleshoot complex issues across operating systems, hardware, networks, data flows, and applications.
Build and manipulate files using core UNIX utilities, including creating tar archives, splitting files, and preparing data for constrained transfer paths.
Support automation workflows using Salt, and adapt quickly from related tools such as Ansible, Puppet, or Terraform.
Build, deploy, or maintain Cross Domain Solutions (CDS) or similar high‑assurance boundary security technologies.
Act as the team’s subject matter expert for Splunk applications, dashboards, data routing, and analytics.