Splunk Cloud Administrator

Gunnison; Washington (District of Columbia); On-site; USD 100,000 - 116,000; Full time

Benefits offered by this job

3 weeks Personal Leave

11 paid Holidays

5 days Flexible Time Off

401(k) matching 50%

Medical, Dental, Vision

Life and Disability Insurance

Public Transportation Subsidies

Certifications & Training Allowance up

Job summary

Gunnison is seeking an experienced Splunk Cloud Administrator to support CDC cybersecurity operations by designing, implementing, and managing Splunk Enterprise across on-prem, MSP, and cloud infrastructures.

You will write advanced SPL queries, manage data ingestion, configure forwarders, build dashboards, and automate tasks using Python, Bash, and PowerShell. Requires Splunk Cloud Admin cert and GovCloud experience.

Qualifications

• Expert Splunk Cloud/Enterprise admin for large-scale environments.
• Strong SPL, architecture, CLI management for Linux/Windows; API, ETL, AWS/Azure skills.
• Familiarity with cybersecurity tools, databases, FISMA, vulnerability mgmt, Zero Trust, GRC platforms.
• ServiceNow, Archer, and Jira familiarity.
• Excellent communication, documentation, and teamwork skills.
• Splunk Cloud Certified Admin

Responsibilities

• Write and optimize advanced SPL queries for monitoring, reporting, and troubleshooting.
• Manage data ingestion, indexing, and forwarding from cloud, server, app, and endpoint sources.
• Configure and support Splunk forwarders with deployment servers, Syslog-NG, Cribl, AWS Lambda, and Azure Function Apps.
• Create dashboards, visualizations, reports, and alerts for various users.
• Automate tasks and data processes using Python, Bash, and PowerShell.
• Support Splunk environments in self-hosted and GovCloud deployments.
• Integrate Splunk with Archer, ServiceNow, Azure, and AWS.
• Troubleshoot infrastructure, networking, and security impacting data visibility.
• Implement RBAC with SAML in Splunk; deploy custom apps across on-prem and cloud.
• Apply Splunk AI Toolkit for anomaly detection, forecasting, clustering, predictive analytics.
• Contribute to monitoring for AI stacks including LLMs

Skills

Splunk Cloud Admin

SPL queries

CLI management (Linux/Windows)

Cloud platforms (AWS/Azure)

API/ETL

Cybersecurity tools

ServiceNow/Archer/Jira familiarity

Documentation/communication

Splunk Cloud Certified Admin

Tools

Cribl

Syslog-NG

Splunk deployment servers

Archer

ServiceNow

AWS

Azure

Job description

This position is contingent upon a future opening with Gunnison.

Salary: $100,000 - $116,000/year

The Splunk Cloud Administrator will support IT and cybersecurity operations for the CDC by designing, implementing, and managing Splunk Enterprise environments across on-premises, MSP, and cloud infrastructures. This role enables enterprise security monitoring, data integration, automation, and compliance activities for the CDC’s Cybersecurity Program Office (CSPO).

• Write and optimize advanced SPL queries for monitoring, reporting, and troubleshooting.
• Manage data ingestion, indexing, and forwarding for internal teams and customers from cloud, server, application, and endpoint sources.
• Configure and support Splunk forwarders though Splunk deployment servers in conjunction with Syslog-NG, Cribl, AWS Lambda, and Azure Function Apps for reliable data intake.
• Create dashboards, visualizations, reports, and alerts for both technical and business users.
• Automate operational tasks and data processes using Python, Bash, and PowerShell.
• Support Splunk environments in both self-hosted and Splunk GovCloud deployments.
• Integrate Splunk with enterprise platforms including Archer, ServiceNow, Azure, and AWS.
• Troubleshoot platform infrastructure, networking, and security-related issues impacting data visibility and performance.
• Troubleshoot and implement role-base access controls with SAML in Splunk
• Custom app development, vetting, and deployment to on-premises and Splunk Cloud instances
• Apply Splunk AI Toolkit for use cases such as anomaly detection, forecasting, clustering, and predictive analytics.
• Contribute to monitoring and visibility for AI application stacks, including LLMs and related infrastructure, when needed.

Requirements

• Expert Splunk Cloud/Enterprise administration for large-scale environments; strong SPL, Splunk architecture, CLI management (Linux and Windows), API, ETL, AWS/Azure skills.
• Knowledge of cybersecurity tools, databases, FISMA, vulnerability management, Zero Trust, CDM, and GRC platforms.
• ServiceNow, Archer, and Jira familiarity
• Strong communication, documentation, analysis, and teamwork capabilities.
• Splunk Cloud Certified Admin

Clearance Requirement: Ability to obtain and maintain a Public Trust.

Desired Qualifications

• Federal or healthcare sector experience; CDC/HHS experience
• NIST knowledge
• Splunk Enterprise Security (ES) Admin
• Splunk ITSI Admin
• Cribl
• CISSP
• Security+
• Armis

The salary range for this position depends upon multiple factors including location, the individual's knowledge, skills, competencies, and experience, and contract-specific budget constraints and organizational requirements.

Benefits

• 3 weeks of Personal Leave your first year
• 11 paid Holidays each year
• 5 days of Flexible Time Off each year for approved training or certifications (self-study is ineligible)
• 401(k) company match at 50% up to 10% of your salary
• Medical, Dental and Vision Insurance
• Life and Disability Insurance
• Public Transportation Subsidies
• Certifications and Training Allowance - Up to $5,000/year!

Why Join Gunnison?

• Gunnison takes on ambitious projects. We target fun, challenging work that requires creative thinking and innovation.
• Quality is our top priority.
• Gunnison employee benefits meet or exceed what other companies in the Washington, D.C. metropolitan area offer.
• There is a great sense of camaraderie at Gunnison. This is an atmosphere we will maintain as we continue to grow.
• We are growing rapidly and the opportunity for individual professional growth with Gunnison is outstanding.
• We hire for careers at Gunnison, not to fill a position.

Equal Opportunity/Affirmative Action Employer. Must be eligible for employment in the United States. We are unable to sponsor candidates at this time.

In 1994 Gunnison began serving the greater Washington, D.C. metro area, focused on tackling our customers' most ambitious technology projects. By creating a culture dedicated to enabling our customers and employees to achieve more than they ever thought they could, the company has thrived for over 25 years.