Splunk & Microsoft 365 Security Admin

Belcan LLC; Des Moines (IA); On-site; USD 95,000 - 105,000; Full time

Job summary

Belcan LLC in Des Moines is seeking a Splunk & Microsoft 365 Administrator to manage Splunk and Microsoft 365 environments, including Exchange Online, Teams, SharePoint Online, OneDrive, and Entra ID, with focus on reliability, security, and performance.

The ideal candidate will have strong troubleshooting skills and expertise in SIEM, monitoring, and cloud administration, with 5–8 years of relevant experience.

Qualifications

• 5–8 years in Splunk administration and security analytics.
• Hands-on experience with Splunk Enterprise, Cloud, ES and ITSI.
• Strong Microsoft 365 knowledge and Entra ID administration.
• Experience with SIEM, data onboarding, parsing, and alerting.
• Scripting with PowerShell or Python.

Responsibilities

• Install, configure, and maintain Splunk Enterprise and Forwarders.
• Manage indexers, search heads, deployment servers, and clusters.
• Develop dashboards, alerts, and monitoring solutions.
• Onboard data sources and ensure CIM alignment where needed.
• Optimize performance, retention, and licensing for Splunk.
• Administer Microsoft 365: Exchange Online, Teams, SharePoint, OneDrive, Purview.
• Configure Entra ID, RBAC, MFA, SSO, and Conditional Access.
• Support security monitoring, incident response, and audits.

Skills

ITSM & Monitoring

RBAC

Zero Trust Security

Scripting concepts

Education

Tools

Splunk

Splunk Enterprise

Splunk Cloud

Splunk Enterprise Security (ES)

Splunk ITSI (preferred)

Universal Forwarders

PowerShell

Python

Job description

Belcan LLC in Des Moines is seeking a Splunk & Microsoft 365 Administrator to manage Splunk and Microsoft 365 environments, including Exchange Online, Teams, SharePoint Online, OneDrive, and Entra ID, with focus on reliability, security, and performance.

The ideal candidate will have strong troubleshooting skills and expertise in SIEM, monitoring, and cloud administration, with 5–8 years of relevant experience.