SIEM Administrator Support (Active Secret Clearance) - Sign-On B with Security Clearance

Akima Infrastructure Services; Honolulu (HI); On-site; USD 155,000 - 185,000; Full time

Benefits offered by this job

Medical, dental, vision

Life insurance

401(k)

Paid PTO

Job summary

Akima Systems Engineering (ASE) is seeking a SIEM Administrator to manage and optimize the USINDOPACOM Splunk environment, including Splunk Enterprise and Splunk ES. The role requires an active secret clearance and at least four years in admin roles with two in Splunk, plus a Splunk Certified Admin credential.

The successful candidate will install, configure, monitor, and enhance SIEM dashboards, reports, and threat detection workflows, while ensuring DoD compliance and supporting on-site

Qualifications

• Active secret clearance required (IAW DoD 8140.03-M, Intermediate Proficiency).
• Four+ years in system/network administration or development and two+ years Splunk administration.
• Splunk Enterprise Certified Admin credential.
• Experience administering Linux servers.
• Experience with SIEM content development.
• Strong analytical and problem-solving skills.

Responsibilities

• Install, configure, maintain, and troubleshoot Splunk Enterprise and Splunk Enterprise Security (ES).
• Monitor SIEM performance, security, availability, and health.
• Manage Splunk configurations, inputs, indexes, apps, updates, and patches.
• Develop and maintain security dashboards, alerts, reports, and correlation searches.
• Conduct DISA STIG checks, ACAS vulnerability assessments, and PKI validations.
• Identify vulnerabilities and propose improvements or automation.
• Collaborate with cybersecurity and sysadmin teams to enhance monitoring and ServiceNow workflows.
• Maintain documentation, baselines, and change management records.
• Ensure compliance with DoD and USINDOPACOM cybersecurity requirements.
• Review ServiceNow tickets and provide after-hours/weekend maintenance support.

Skills

Secret clearance

Splunk administration

Linux administration

SIEM content development

Analytical skills

Tools

Splunk Enterprise

Splunk Enterprise Security

Job description

ASE is looking for a SIEM Administrator Support to work in Camp H M Smith, HI. The SIEM Administrator is responsible for managing, maintaining, and optimizing the USINDOPACOM enterprise Security Information and Event Management (SIEM) platform, specifically utilizing Splunk Enterprise (SE) and Splunk Enterprise Security (ES). Eligible candidates may qualify for a sign-on bonus of up to $5,000 based on qualifications and relevant experience.

Responsibilities

Install, configure, maintain, and troubleshoot Splunk Enterprise and Splunk Enterprise Security (ES) environments.

• Monitor SIEM system performance, security, availability, and overall operational health.
• Manage Splunk configurations, data inputs, indexes, applications, updates, and patches.
• Develop and maintain security dashboards, alerts, reports, and correlation searches to support threat detection and incident response.
• Perform DISA STIG compliance checks, ACAS vulnerability assessments, and PKI security validations.
• Identify system vulnerabilities, troubleshoot issues, and recommend improvements or automation.
• Collaborate with cybersecurity teams and system administrators to improve security monitoring and ServiceNow workflows.
• Maintain system documentation, configuration baselines, and change management records.
• Ensure compliance with DoD and USINDOPACOM cybersecurity requirements.
• Review ServiceNow tickets and provide occasional after-hours and weekend support for planned maintenance and unexpected outages.

Qualifications

An active secret clearance is required. IAW DoD 8140.03-M, must meet the Intermediate Proficiency.

Level Qualifications

• Must have at least four years of system, network administration or developer experience and two years of Splunk administration.
• Must have Splunk Enterprise Certified Admin credential.
• Must have experience administering Linux servers.
• Must have experience with SIEM Content Development.
• Demonstrated experience of strong analytical and problem-solving skills.

Desired Qualifications

• Prefer Red Hat Linux administrator certification (RHCSA/RHCE).
• Prefer experience with Splunk Enterprise Security.
• Prefer experience in a virtualized environment (VMware, etc).
• Prefer one or more relevant CND certifications: CISSP, CASP, OSCP, CySA+, CEH, or GCIH.

Any clearance requirements for this position are established by the government contract.

Work Type: On-Site

Pay Range: $155,000 - $185,000

Benefits

• The company offers a comprehensive benefits program, including medical, dental, vision, life insurance, 401(k) and a range of other voluntary benefits.
• Paid Time Off (PTO) is offered to regular full-time and part-time employees.

Company Description

Work Where it Matters Akima Systems Engineering (ASE), an Akima company, is not just another federal systems support contractor. As an Alaska Native Corporation (ANC), our mission and purpose extend beyond our exciting federal projects as we support our shareholder communities in Alaska. At ASE, the work you do every day makes a difference in the lives of our 15,000 Iñupiat shareholders, a group of Alaska natives from one of the most remote and harshest environments in the United States. For our shareholders, ASE provides support and employment opportunities and contributes to the survival of a culture that has thrived above the Arctic Circle for more than 10,000 years. For our government customers, ASE delivers solutions in maritime IT, systems engineering, and integration across the Department of Defense and stands ready to help improve operational performance at a reasonable and sustainable cost. As an ASE employee, you will be surrounded by a challenging, yet supportive work environment that is committed to innovation and diversity, two of our most important values. You will also have access to our comprehensive benefits and competitive pay in addition to growth opportunities and excellent retirement options.