SITEC - Splunk Data Engineer - MacDill AFB

Peraton; Tampa (FL); On-site; USD 104,000 - 166,000; Full time

Benefits offered by this job

Overtime

Shift differential

Discretionary bonuses

Job summary

Peraton SITEC role at MacDill AFB seeks a Splunk Data Engineer to enable visibility and analytics within the Zero Trust framework. You will ingest telemetry, optimize forwarders, and enforce CIM mappings while developing custom add-ons for non-standard mission data.

The position requires DoD 8570 IAT II certification, TS/SCI clearance, and extensive experience with Splunk, Kafka, NiFi, and log transport at the enterprise edge. Primarily on-site at MacDill AFB, FL.

Qualifications

• Minimum 12 years of experience with education alternatives as listed; DoD 8570 IAT II certification is required.
• Top Secret/SCI clearance is required.
• Experience with data onboarding pipelines and telemetry ingestion into Splunk is essential.

Responsibilities

• Engineer, configure, and maintain data onboarding pipelines for telemetry ingestion into Splunk.
• Implement and optimize Splunk Forwarders and Edge Processors for data routing and masking at the enterprise edge.
• Design data tagging schemas mapping sources to CIM and develop custom Splunk add-ons.
• Troubleshoot data parsing, event breaking, and time-stamping to ensure fast search performance.
• Collaborate with architects and network engineers to establish secure, encrypted transport to Splunk.

Skills

Python

PowerShell

Data analytics

Ops switching

Education

Bachelor’s degree

DoD 8570 IAT II Certification

Tools

Splunk

Splunk Edge Processors

Splunk Heavy Forwarders

Kafka

NiFi

syslog‑NG

Rsyslog

Job description

SITEC - Splunk Data Engineer - MacDill AFB

Job Location: MacDill AFB, Florida, USA

Responsibilities

Peraton requires Systems Engineers to support the Special Operation Command Information Technology Enterprise Contract (SITEC) - 3 EOM. This position is located at MacDill AFB in Florida.

The purpose is to provide USSOCOM, its Component Commands, TSOCs, and deployed forces with Operations and Maintenance services to maintain Network Operations, systems, network infrastructure, end‑user support, configuration, change, license, asset management, training, and IMAC services. The responsibilities support USSOCOM, CIO/J6, and end‑users globally 24x7x365.

The Splunk Data Engineer will serve as a technical subject‑matter expert focused on visibility and analytics for the Zero Trust architecture. Responsibilities include:

• Engineer, configure, and maintain robust data onboarding pipelines to ingest telemetry into the enterprise Splunk deployment.
• Implement and optimize Splunk Universal Forwarders, Heavy Forwarders, and Splunk Edge Processors to manage data routing, filtering, and masking at the enterprise edge.
• Design and implement standardized data tagging and field extraction schemas, mapping incoming data sources to the Splunk Common Information Model (CIM).
• Develop custom technology add‑ons (TAs) to parse, clean, and enrich non‑standard mission data prior to ingestion.
• Troubleshoot and resolve complex data parsing, event breaking, and time‑stamping issues to guarantee search performance and minimize ingest‑to‑search latency.
• Collaborate with enterprise architects and network engineers to establish secure, encrypted, highly available transport pathways (e.g., Syslog, HEC) into Splunk.
• Design and implement data reduction strategies and edge‑filtering policies to optimize licensing costs while retaining critical logs per DoD compliance mandates.
• Maintain comprehensive technical documentation, including data flow diagrams, ingestion matrices, and data taxonomy schemas.

Qualifications

Required Qualifications:

• Minimum 12 years of experience with a high school degree, 10 years with an associate degree, 8 years with a bachelor’s, or 6 years with a master’s.
• DoD 8570 IAT II Certification.
• DoD Top Secret/SCI clearance.

Desired Qualifications:

• Compliance with DoW 8140 under the Work Role Code 451 – Systems Administrator Intermediate or higher by 1 Oct 26.
• Previous experience operating within DoW or DoD enterprise network environments.
• Deep understanding of the DoD Zero Trust Strategy, focusing on Data visibility, tagging, and analytics.
• Experience with scripting languages (Python, PowerShell) for automation of data classification tasks and tool API integration.
• Hands‑on experience with pipeline middleware and syslog aggregation tools such as Apache Kafka, Apache NiFi, syslog‑NG, or Rsyslog.
• Demonstrated experience configuring and scaling Splunk Edge Processors or Heavy Forwarders to filter, mask, and route high‑volume telemetry at the enterprise edge.

Target Salary Range

$104,000 – $166,000. This typical salary range depends on the scope and responsibilities, experience, education, skills, location, and contract considerations. Eligible individuals may benefit from overtime, shift differential, and discretionary bonuses.

EEO

Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.