Splunk Engineer with Security Clearance

Fuse Engineering; Fort Meade (MD); On-site; USD 120,000 - 150,000; Full time

Job summary

Fuse Engineering LLC in the United States is seeking a Splunk Engineer to design, implement, optimize, and sustain enterprise logging, monitoring, and security analytics solutions at Ft. Meade, MD.

The role requires TS/SCI w/ Polygraph and on-site work, with responsibilities spanning architecture, dashboards for security events, and compliance monitoring to ensure audit readiness.

Qualifications

• Experience designing and operating Splunk Enterprise architectures.
• Strong SIEM design, security logging, and compliance reporting.
• Proficient Linux system administration.
• Data onboarding via Syslog, NetFlow, API ingestion.
• Scripting in Python, Bash, and SPL.

Responsibilities

• Architect, deploy, and maintain enterprise Splunk environments and architectures.
• Design and sustain dashboards and analytics for security events and user activity.
• Support STE/STN compliance, vulnerability and scans.
• Integrate data sources and perform data onboarding.
• Perform Splunk scaling, performance tuning, and index management.
• Provide Tier-4 support and coordinate with vendor Splunk engineering.
• Advise on Splunk security configurations and audit capabilities.
• Develop automation to reduce false positives and improve alert fidelity.

Skills

Splunk architecture

SIEM design

Linux administration

Data onboarding

Scripting (Python)

Job description

Splunk Engineer Fuse Engineering LLC Splunk Engineer Ft. Meade, MD

Description The Splunk Engineer is responsible for the design, implementation, optimization, and sustainment of enterprise logging, monitoring, and security analytics solutions. This role ensures Splunk environments meet availability, performance, compliance, and audit requirements .

Key Responsibilities

• Architect, deploy, and maintain enterprise Splunk environments, including indexers, search heads, forwarders, and multi-region architectures.
• Design, develop, and sustain custom Splunk dashboards and analytics supporting:
• Security events, audit data, and user activity monitoring (UAM)
• STE/STN compliance, vulnerability and compliance scans
• Network/system observable events by SSP
• Containerized application events by namespace
• Mission metrics, outage tracking, and system/network utilization
• Ensure Splunk dashboards and logging infrastructure maintain =93% operational availability monthly.
• Develop and maintain dashboards for authentication events, privileged access, account management, role escalation, and container security events.
• Integrate data from NetFlow/sFlow, Syslog, Cribl, Nagios, HP NNMi, HPNA, vulnerability scanners, and compliance tools.
• Perform Splunk scaling, performance tuning, data onboarding, and index management.
• Maintain log retention policies ensuring:
• 30 days online searchable logs
• 5 years, 11 months offline retention with restore capability
• Provide Tier-4 support, including vendor escalation and coordination with Splunk engineering.
• Advise architects and security accreditors on Splunk security configurations and audit capabilities.
• Develop automation, parsing, and enrichment logic to reduce false positives and enhance alert fidelity.

Requirements

• TS/SCI w/ Polygraph Clearance Required

Required Skills

• * Splunk Enterprise architecture and administration
• Security logging, SIEM design, and compliance reporting
• Linux systems administration
• Data onboarding (Syslog, NetFlow, API ingestion)
• Scripting (Python, Bash, SPL)