Senior Splunk Admin - Enterprise Data & Dashboards

GCyber; Washington (District of Columbia); On-site; USD 120,000 - 160,000; Full time

Benefits offered by this job

Paid leave

Parental leave

401(k) matching

Healthcare coverage

Professional development

Commuter benefits

Job summary

GCyber is seeking a Senior Splunk Administrator to support a high-profile government customer. This hands-on role covers data ingestion, dashboard development, and resolving issues when data is not properly parsed.

The position requires active DoD Top Secret/SCI clearance and IAT II certification, with 5+ years of hands-on Splunk experience in distributed environments. On-site DC area work with GCyber benefits and career development opportunities.

Qualifications

• Active DoD Top Secret/SCI clearance required.
• Active IAT II certification (e.g., Security+, CySA+, CCNA-Security, GSEC, CND, GICSP, SSCP).
• Bachelor’s degree or equivalent in a relevant field.
• 5+ years of Splunk administration or engineering experience.
• Hands-on experience with distributed enterprise Splunk environments.

Responsibilities

• Administer and monitor enterprise Splunk environments incl. indexer clusters, search head clusters, forwarders, deployers, and monitoring consoles.
• Troubleshoot missing, delayed, duplicated, or misparsed data across ingestion paths.
• Configure Splunk inputs, outputs, indexes, sourcetypes, routing, and event parsing.
• Build and maintain dashboards, reports, alerts, and saved searches for ops and security visibility.
• Define dashboard requirements with stakeholders and present results clearly.
• Develop and optimize SPL searches for dashboards, validation, and reporting.
• Diagnose issues across forwarders, queues, certificates, network, indexing, and permissions.

Skills

Splunk administration

DoD TS/SCI clearance

IAT II certification

Data ingestion & parsing

Dashboard development

Troubleshooting Splunk

Education

Bachelor’s degree in Computer Science / Cybersecurity / Computer Engineering / Information Technology

Job description

GCyber is seeking a Senior Splunk Administrator to support a high-profile government customer. This hands-on role covers data ingestion, dashboard development, and resolving issues when data is not properly parsed.

The position requires active DoD Top Secret/SCI clearance and IAT II certification, with 5+ years of hands-on Splunk experience in distributed environments. On-site DC area work with GCyber benefits and career development opportunities.