Splunk Engineer

CACI International Inc.; McLean (VA); On-site; USD 113,000 - 238,000; Full time

Job summary

CACI International Inc. is seeking a highly experienced Splunk Engineer in McLean, VA to manage and extend our Splunk platform. The role focuses on building applications, dashboards, and automation to support IT operations and cybersecurity missions for government customers.

You will work within an Agile team, onboard new data sources, and ensure data quality across Linux/Windows environments while collaborating with IT teams to resolve issues and advance platform capabilities.

Qualifications

• TS/SCI clearance with Counterintelligence Polygraph
• 8+ years of experience managing a Splunk Platform and ITSI
• BA/BS degree or 10+ years of experience in lieu of degree
• Experience implementing Splunk products including universal and heavy forwarders, search heads, deployment server, and indexes
• Knowledge of cybersecurity compliance (RMF/IA) is a plus
• Strong problem-solving and collaboration skills

Responsibilities

• Design core scripts to automate Splunk maintenance and alerting tasks
• Develop dashboards and reports to display business-critical information
• Develop and maintain dashboards, reports, and alerts for IT systems monitoring
• Engage with Product Owners to align platform capabilities with business needs
• Create scalable security architectures using integrations
• Assist in developing policies for secure operation of Splunk infrastructure
• Support cloud deployment (AWS and Azure) and cybersecurity compliance checks
• Onboard new data sources into Splunk and ensure data quality
• Collaborate with government customers on data-source onboarding requirements

Skills

Analytical thinking

Team collaboration

Documentation

Communication

Education

BA/BS degree or equivalent experience

Tools

Splunk Enterprise

Splunk IT Service Intelligence (ITSI)

Splunk Universal Forwarder

Splunk Search Head

Splunk Deployment Server

Splunk Indexes

Linux

Windows

Python

Perl

JavaScript

XML

JSON

Job description

Job Title: Splunk EngineerJob Category: EngineeringTime Type: Full timeMinimum Clearance Required to Start: TS/SCI with PolygraphEmployee Type: RegularPercentage of Travel Required: NoneType of Travel: None* * *The Opportunity:CACI is seeking a highly motivated Splunk Engineer that has 8+ years of experience managing a Splunk Platform, creating Splunk applications, and using IT Service Intelligence (ITSI). The Splunk engineer will build applications to help manage, search, analyze, and visualize data. The role includes troubleshooting and performing Splunk application development following a Scrum Agile approach. The role also includes examining the existing environment for deficiencies and onboarding new data sources.Responsibilities:Design core scripts to automate Splunk maintenance and alerting tasksDevelop dashboards and reports to display business-critical informationDevelop and maintain dashboards, reports, and alerts to ensure efficient monitoring and management of IT systemsEngage with Product Owners to align platform capabilities with evolving business needsCreate scalable, flexible security architectures using standards-based integrationsAssist in developing policies for the secure operation of Splunk infrastructureSupport cloud-based deployment and sustainment (AWS and Azure)Conduct software integration testing and cybersecurity compliance tasksAutomate processes and develop efficiencies alongside development and install teamsMaintain infrastructure for integration, cyber compliance, and network administrationSupport both UNIX/Linux and Windows-based systemsCollaborate with IT teams to identify, troubleshoot, and resolve IT issues using SplunkDocument configurations, changes, and troubleshooting procedures.Support new operational needs by integrating Splunk with other enterprise security services as required by government customersCollaborate with government customers to understand their specific security service integration requirementsDevelop and maintain integration scripts and configurations for various enterprise security servicesOnboard new data sources into the Splunk environment, ensuring proper indexing, data normalization, and data qualityDevelop and maintain scripts and configurations for onboarding new data sourcesEnsure seamless data flow from new data sources into SplunkTroubleshoot and resolve issues related to onboarding new data sourcesQualifications:Required:TS/SCI Clearance with Counterintelligence PolygraphBA/BS degree and 8 years of experience. In lieu of a bachelor’s degree 10 years of experience if AA/AS, or 12 additional years of experience with HS diploma8+ years of experience and demonstrated knowledge supporting IT Systems4+ years of experience implementing and operating Splunk systems to include universal and heavy forwarders, search heads, deployment server, and indexesDesign, develop, and implement new features for Splunk productsProvide training and support to IT staff on Splunk usage and best practicesProven experience in designing, implementing, and maintaining Splunk solutions including, but not limited to: Splunk Enterprise, Splunk IT Service Intelligence, Splunk Log ManagementKnowledge of Linux security best practicesKnowledge of cybersecurity compliance including RMF and IA standardsExcellent problem-solving and analytical skillsService-oriented mindsetStrong communication and collaboration skillsAt least one Splunk Certification: Splunk Certified for Splunk IT Service Intelligence (ITSI), Splunk Certified Administrator (SCA)Desired:Experience integrating Splunk with ServiceNow to enable automated incident management, problem management, and change management workflowsKnowledge of security compliance and ATO (Authority to Operate) supportPreferred knowledge of FISMA (Federal Information Security Management Act) requirementsCurrent Security+ or DOD 8570 IAT Level II CertificationAWS or Azure CertificationITIL v4 CertificationStrong understanding of IT operations, security, and business intelligenceGood team player with a strong willingness to help othersExperience scripting in the following preferred: Python, Perl, and JavaScript in relation to Splunk Apps/Add-ons, SQL for querying structured data, Knowledge of XML and JSON for data handling, Splunk Search Processing Language (SPL) for data analysis in Splunk-What You Can Expect: A culture of integrity.At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.An environment of trust.CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.A focus on continuous growth.Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.Pay Range :There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.The proposed salary range for this position is:$113,200 - $237,800CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.