Senior Splunk Admin (TS/SCI) – CND & Enterprise Security

G2IT, LLC.; Suitland (MD); On-site; USD 120,000 - 180,000; Full time

Job summary

G2IT is seeking an experienced Splunk Administrator (Level 3) to support enterprise cybersecurity, monitoring, and data analytics environments. The candidate will have hands-on Splunk admin experience, develop SPL queries, dashboards, and alerts, and support RMF and CIM compliance in DoD/IC contexts.

Required are TS clearance eligibility, 10+ years in LAN/WAN across Windows/Unix, 6+ years in Splunk, and proficiency with Python, AWS, and RMF.

Qualifications

• Active TS clearance with TS/SCI eligibility
• 10+ years LAN/WAN in Windows and Unix/Linux environments
• 8+ years CND experience
• 6+ years Splunk administration and optimization
• Expert Splunk Enterprise & apps (ES, SOAR, UEBA, ITSI)
• Experience with Splunk Add-ons, Apps, TAs, and Universal Forwarders

Responsibilities

• Install, configure, administer, maintain and optimize Splunk environments
• Support Splunk Enterprise and ES/SOAR/UEBA/ITSI
• Develop SPL queries, dashboards, reports, alerts
• Perform log ingestion, parsing, normalization, analysis
• Maintain CIM compliance and data mapping
• Automate tasks with Python scripting
• Support AWS and RHEL environments
• Communicate complex cybersecurity issues to stakeholders

Skills

Splunk administration

SPL queries

Python scripting

RMF compliance

Technical documentation

Cybersecurity briefing

Strong communication

Education

Bachelor's degree in CS/IT/IA

Master's degree preferred

15+ years experience alternative to degree

Tools

Splunk Enterprise

AWS

RHEL/Windows

SQL

Python

Job description

G2IT is seeking an experienced Splunk Administrator (Level 3) to support enterprise cybersecurity, monitoring, and data analytics environments. The candidate will have hands-on Splunk admin experience, develop SPL queries, dashboards, and alerts, and support RMF and CIM compliance in DoD/IC contexts.

Required are TS clearance eligibility, 10+ years in LAN/WAN across Windows/Unix, 6+ years in Splunk, and proficiency with Python, AWS, and RMF.