Senior Splunk Cloud Admin – Cybersecurity Ops

Gunnison Consulting Group; Washington, Northern (District of Columbia, KY); Hybrid; USD 100,000 - 116,000; Full time

Job summary

Gunnison Consulting Group is seeking a Splunk Cloud Administrator to design, implement, and manage Splunk environments for the CDC across on-premises, MSP, and cloud setups. You will write SPL queries, manage data ingestion, and configure forwarders, dashboards, and alerts for diverse users. The role requires expertise in Splunk Cloud/Enterprise, Linux/Windows CLI, and cloud skills (AWS/Azure).

Collaboration with security teams and enterprise platforms is essential. U.S.

Qualifications

• Expert Splunk Cloud/Enterprise administration for large-scale environments.
• Strong SPL, Splunk architecture, CLI management (Linux and Windows).
• Experience with API, ETL, and AWS/Azure skills.

Responsibilities

• Write and optimize advanced SPL queries for monitoring, reporting, and troubleshooting.
• Manage data ingestion, indexing, and forwarding for internal teams and customers from cloud, server, application, and endpoint sources.
• Configure and support Splunk forwarders through Splunk deployment servers with Syslog-NG, Cribl, AWS Lambda, and Azure Function Apps.
• Create dashboards, visualizations, reports, and alerts for technical and business users.
• Automate operational tasks and data processes using Python, Bash, and PowerShell.
• Support Splunk environments in self-hosted and GovCloud deployments.
• Integrate Splunk with Archer, ServiceNow, Azure, and AWS.
• Troubleshoot platform infrastructure, networking, and security issues affecting data visibility.

Skills

Splunk Cloud Admin

SPL scripting

Linux/Windows CLI

Cloud: AWS/Azure

Tools

Splunk

Cribl

ServiceNow

Archer

Jira

Job description

Gunnison Consulting Group is seeking a Splunk Cloud Administrator to design, implement, and manage Splunk environments for the CDC across on-premises, MSP, and cloud setups. You will write SPL queries, manage data ingestion, and configure forwarders, dashboards, and alerts for diverse users. The role requires expertise in Splunk Cloud/Enterprise, Linux/Windows CLI, and cloud skills (AWS/Azure).

Collaboration with security teams and enterprise platforms is essential. U.S.