Tenable ACAS & Splunk Administrator

CompQsoft, Inc.•Kittery, ME

1h•$90,000 - $100,000•Remote

About The Position

This role involves the management, configuration, administration, implementation, and optimization of SPLUNK infrastructure and all supported systems. The administrator will manage technologies and processes to sustain and improve the SPLUNK environment's performance, configure servers, and modify host/agent files in accordance with DISA STIG, DoD policies, and Vendor best practices. The position also requires providing support, monitoring, and corrective action for SPLUNK infrastructure, provisioning SPLUNK systems for scanning requirements, and designing/implementing infrastructure strategies. Support for SPLUNK systems development, planning, deployment, data management, and disaster recovery planning, along with security patching of host systems in compliance with IAV updates and ACAS reporting, is also a key responsibility. The role includes backup, recovery, and archiving of host systems configurations, ensuring virtual infrastructure security posture compliance with DISA STIGs and DoD regulations, and providing systems/performance/traffic monitoring reports. Incident documentation, creation/maintenance of Work Procedures (WPs), and incident resolution are also part of the duties. Due to the 24/7 availability requirements, emergent response outside of normal working hours may be required.

Requirements

Management, configuration, administration, implementation, and optimization of SPLUNK infrastructure.
Support, monitoring, and corrective action for SPLUNK infrastructure.
Provisioning SPLUNK systems for scanning requirements.
Designing, planning, and implementing systems infrastructure strategies.
Supporting SPLUNK systems development, planning, deployment, data management, and disaster recovery planning.
Security patching of host systems in compliance with IAV updates, ACAS reporting, and Vendor best practices.
Backup, recovery, and archiving of host systems configurations.
Ensuring virtual infrastructure security posture compliance with DISA STIGs and DoD regulations.
Systems, performance monitoring, and traffic monitoring.
Incident documentation using ticket tracking systems.
Maintaining and creating Work Procedures (WPs).
Support, analysis, and incident resolution.
Ability to respond to emergent issues outside of normal working hours.
CompTIA SEC+ certification.
Secret clearance.

Nice To Haves

Tenable ACAS experience.

Responsibilities

Provide management, configuration, administration, implementation, and optimization of SPLUNK infrastructure and all supported systems.
Manage technologies and processes to sustain and improve the SPLUNK environment's performance.
Configure servers and modify host/agent files in conjunction with DISA STIG, DoD policies, and Vendor best practices.
Provide support, monitor, and take corrective action to support SPLUNK infrastructure.
Provision SPLUNK systems to support of necessary scanning requirements.
Design, plan and implement sound systems infrastructure strategies.
Support the SPLUNK systems development, planning, deployment, data management, and disaster recovery planning best practices and testing.
Perform all security patching of host systems in compliance with IAV updates, ACAS reporting and Vendor best practices.
Provide backup, recovery and archiving of all host systems configurations via the data protection solution.
Perform and enable controls to ensure the virtual infrastructure security posture maintains compliance with DISA STIGs and DoD regulations.
Provide systems, performance monitoring and traffic monitoring via weekly reports provided to management.
Document incidents using the ticket tracking system.
Maintain existing and when required create new WPs.
Provide support, analysis, and incident resolution.
Respond to emergent issues outside of normal working hours as required.