Splunk Security Engineer — Linux & Monitoring

Booz Allen Hamilton; Maryland; On-site; USD 69,000 - 158,000; Full time

Benefits offered by this job

Health benefits

Retirement plans

Paid leave

Job summary

Booz Allen Hamilton seeks a Splunk Administrator to support US Navy client operations in Indian Head, MD. You will administer Splunk Enterprise on Linux, install forwarders, indexers, and search heads, and optimize performance while enforcing security controls.

Ideal candidates have 4+ years of Splunk admin experience, Linux expertise, SPL scripting, and Secret clearance eligibility. Splunk certs and RHCSA/LPIC-2 are preferred; you will collaborate with security teams and participate in incident

Qualifications

• 4+ years of experience administering Splunk Enterprise on Linux
• Experience configuring distributed Splunk infrastructure (indexers, search heads, forwarders)
• Knowledge of Linux administration, troubleshooting, and performance tuning
• SPL for data analysis and query optimization
• Scripting in Bash and Python for automation

Responsibilities

• Administer, configure, and maintain Splunk Enterprise on Linux-based systems
• Install and configure Splunk forwarders, indexers, and search heads
• Design, implement, and manage Splunk infrastructure on Linux servers
• Troubleshoot and optimize Splunk performance and reliability
• Develop automation scripts for monitoring, backups, and configurations
• Collaborate with security and operations teams on logging and security best practices

Skills

Splunk Admin

Linux Admin

Python

Bash

SPL

Education

HS diploma or GED

Splunk Certification

RHCSA/LPIC-2

Tools

Red Hat Linux

Job description

Booz Allen Hamilton seeks a Splunk Administrator to support US Navy client operations in Indian Head, MD. You will administer Splunk Enterprise on Linux, install forwarders, indexers, and search heads, and optimize performance while enforcing security controls.

Ideal candidates have 4+ years of Splunk admin experience, Linux expertise, SPL scripting, and Secret clearance eligibility. Splunk certs and RHCSA/LPIC-2 are preferred; you will collaborate with security teams and participate in incident