Splunk Cloud Admin for Enterprise Security & Automation

Gunnison; Washington (District of Columbia); On-site; USD 100,000 - 116,000; Full time

Benefits offered by this job

3 weeks Personal Leave

11 paid Holidays

5 days Flexible Time Off

401(k) matching 50%

Medical, Dental, Vision

Life and Disability Insurance

Public Transportation Subsidies

Certifications & Training Allowance up

Job summary

Gunnison is seeking an experienced Splunk Cloud Administrator to support CDC cybersecurity operations by designing, implementing, and managing Splunk Enterprise across on-prem, MSP, and cloud infrastructures.

You will write advanced SPL queries, manage data ingestion, configure forwarders, build dashboards, and automate tasks using Python, Bash, and PowerShell. Requires Splunk Cloud Admin cert and GovCloud experience.

Qualifications

• Expert Splunk Cloud/Enterprise admin for large-scale environments.
• Strong SPL, architecture, CLI management for Linux/Windows; API, ETL, AWS/Azure skills.
• Familiarity with cybersecurity tools, databases, FISMA, vulnerability mgmt, Zero Trust, GRC platforms.
• ServiceNow, Archer, and Jira familiarity.
• Excellent communication, documentation, and teamwork skills.
• Splunk Cloud Certified Admin

Responsibilities

• Write and optimize advanced SPL queries for monitoring, reporting, and troubleshooting.
• Manage data ingestion, indexing, and forwarding from cloud, server, app, and endpoint sources.
• Configure and support Splunk forwarders with deployment servers, Syslog-NG, Cribl, AWS Lambda, and Azure Function Apps.
• Create dashboards, visualizations, reports, and alerts for various users.
• Automate tasks and data processes using Python, Bash, and PowerShell.
• Support Splunk environments in self-hosted and GovCloud deployments.
• Integrate Splunk with Archer, ServiceNow, Azure, and AWS.
• Troubleshoot infrastructure, networking, and security impacting data visibility.
• Implement RBAC with SAML in Splunk; deploy custom apps across on-prem and cloud.
• Apply Splunk AI Toolkit for anomaly detection, forecasting, clustering, predictive analytics.
• Contribute to monitoring for AI stacks including LLMs

Skills

Splunk Cloud Admin

SPL queries

CLI management (Linux/Windows)

Cloud platforms (AWS/Azure)

API/ETL

Cybersecurity tools

ServiceNow/Archer/Jira familiarity

Documentation/communication

Splunk Cloud Certified Admin

Tools

Cribl

Syslog-NG

Splunk deployment servers

Archer

ServiceNow

AWS

Azure

Job description

Gunnison is seeking an experienced Splunk Cloud Administrator to support CDC cybersecurity operations by designing, implementing, and managing Splunk Enterprise across on-prem, MSP, and cloud infrastructures.

You will write advanced SPL queries, manage data ingestion, configure forwarders, build dashboards, and automate tasks using Python, Bash, and PowerShell. Requires Splunk Cloud Admin cert and GovCloud experience.