Senior Splunk Architect – DoD TS/SCI, RHEL8 & RSA

Leidos; O'Fallon (IL); On-site; USD 131,000 - 237,000; Full time

Job summary

Leidos is seeking a Senior Splunk Administrator to design, implement, and maintain a hardened Splunk environment for the DISA DRSN and enterprise VoIP management. The role emphasizes architecture, security, and cross-team collaboration across Red Hat and Windows platforms.

Qualified candidates will have a DoD TS/SCI clearance, 12+ years in IT with 5+ years Splunk in distributed deployments, and Splunk Architect certification. U.S. citizenship is required.

Qualifications

• Active DoD TS/SCI clearance required.
• 12+ years of overall IT/system administration experience with cybersecurity focus.
• 8+ years in Linux/Windows administration.
• 5+ years administering Splunk in distributed deployments.
• Excellent written and verbal communication; able to engage customers.
• Experience with Splunk CIM data onboarding and normalization.
• Splunk Architect certification and DoD IAT Level II/III certification are required.
• U.S. Citizenship is a must.

Responsibilities

• Design, implement, and maintain Splunk environments including forwarders, indexers, search heads, and deployment servers.
• Install, configure, and integrate Splunk on RHEL 8 with security hardening.
• Harden Splunk on RHEL 8 to meet standards.
• Integrate Splunk with RSA for secure auth and authorization across environments.
• Monitor health, performance, and capacity; perform routine maintenance.
• Troubleshoot Splunk issues, data ingestion, and search optimization.
• Create and maintain architecture diagrams, installation guides, and runbooks.
• Collaborate with security, network, and system teams to ensure seamless integration.

Skills

Splunk architecture

Security clearance

Linux admin

Windows admin

RSA integration

Documentation

Communication

Education

Bachelor’s degree in CS/Engineering

Tools

Splunk Enterprise

RSA PAM integration

RHEL 8

Job description

Leidos is seeking a Senior Splunk Administrator to design, implement, and maintain a hardened Splunk environment for the DISA DRSN and enterprise VoIP management. The role emphasizes architecture, security, and cross-team collaboration across Red Hat and Windows platforms.

Qualified candidates will have a DoD TS/SCI clearance, 12+ years in IT with 5+ years Splunk in distributed deployments, and Splunk Architect certification. U.S. citizenship is required.