Splunk Administrator

CompQsoft Inc; Portsmouth (NH); Hybride; USD 96 000 - 138 000; Plein temps

Avantages offerts par ce poste

Travel expenses paid

Remote work after onboarding

Résumé du poste

CompQsoft Inc. is seeking a Splunk Administrator contractor to support SPLUNK environments with DoD DISA STIG compliance. The role requires Top Secret clearance, CompTIA SEC+ certification, and a BS in IT/cyber-related field.

Initial onsite onboarding week at Portsmouth NH, followed by remote work with travel expense coverage. The candidate will manage SPLUNK systems, perform patching, ensure security posture, document incidents, and provide weekly performance reports for Navy Enterprise

Qualifications

• Requires active Top Secret clearance
• Requires CompTIA SEC+ certification
• Education as BS in IT, Cyber, CS, IS or DS
• willing to travel for onboarding (PNSY) and accept remote work arrangement after initial onsite week

Responsabilités

• Manage SPLUNK environment performance, configuration, and monitoring per DISA STIGs and DoD policies
• Provision SPLUNK systems to support scanning requirements
• Design and implement infrastructure strategies for SPLUNK
• Support deployment, data management, disaster recovery, and testing for SPLUNK
• Perform security patching of hosts per IAV updates and vendor best practices
• Maintain backups, recovery and archiving for host configurations
• Ensure security posture complies with DISA STIGs and DoD SUBMEPP regulations
• Provide weekly system and traffic reports to customer management
• Document incidents in ticketing system and publish KB articles as applicable
• Provide 24/7 support as required for Navy Enterprise customers, with on-site onboarding at Portsmouth NH for a week

Connaissances

Splunk Administration

Formation

BS in IT, Cyber, CS, IS or DS

Outils

RHCSA Certification

RH124 Red Hat Course

DISA STIG Compliance

IAV Updates

Security+ (CompTIA SEC+)

SPLUNK

Description du poste

Location: Remote ( First Week onsite at Portsmouth NH, later remote ) ( travel expense paid )

Start Date: ASAP

Clearance required by project: Top Secret

Certification required: CompTIA SEC+

Education: BS in IT, Cyber, CS, IS or DS

Requirements

Splunk Administration:

The contractor shall manage technologies and processes to sustain and or improve the performance of the SPLUNK environment. The contractor shall configure servers and modify host/agent files in conjunction with DISA STIG, DoD policies, and Vendor best practices. At minimum the contractor shall be required to perform the following tasks in support of the task:

Provide support, monitor, and take corrective action as necessary in support of SPLUNK infrastructure.

Provision SPLUNK systems to support of necessary scanning requirements.

Design, plan and implement sound systems infrastructure strategies.

Support the SPLUNK systems development, planning, deployment, data management, and disaster recovery planning best practices and testing.

Perform all security patching of host systems in compliance with IAV updates, ACAS reporting and Vendor best practices.

Provide backup, recovery and archiving of all host systems configurations via data protection solution.

Perform and enable controls to ensure the virtual infrastructure security posture maintains compliance with DISA STIGs and DoD SUBMEPP regulations.

Provide systems, performance monitoring and traffic monitoring via weekly reports provided to Customer management.

Document incidents using the ticket tracking system and Knowledge Base articles are published when applicable.

Maintain existing and create new WP in support of this task.

Provide support, analysis, and incident resolution; via face-to-face, phone, email, or other electronic means IAW Section Due to the 24/7 availability requirements of Customer Information Systems in support of Navy Enterprise customers across the globe, emergent response outside of normal working hours may be required by personnel to ensure continued operations. Response outside of normal working hours is unlikely, but possible.

Candidate must have Red Hat Certified System Administrator (RHCSA) or proof of (RH124) Red Hat System Administration I Course.

Candidate should have completed:

Candidates must have Security+, active clearance, Splunk experience, good

communication and engagement, and be willing to travel for a week of on-boarding to PNSY.

CompQsoft provides equal opportunity in all aspects of employment and in the working environment to all employees and applicants. CompQsoft does not take any non-merit factors like race, color, religion, sex (gender), mental/physical disability, and age into account for purposes of recruitment, hiring and developmen