Splunk SME Systems Administrator - DoD CyberOps

Amentum; Fort Meade (MD); On-site; USD 180,000 - 225,000; Full time

Benefits offered by this job

Health, dental, and vision insurance

Paid time off and holidays

401(k) matching

Job summary

Amentum is seeking a Systems Administrator - Splunk SME at Fort Meade, MD. You will lead Splunk Enterprise/ES deployment, tuning, and integration in air-gapped and cross-domain environments to support DoD missions.

Security-clearance-relevant expertise and strong scripting are required. Responsibilities include building dashboards, ensuring data quality, and enabling rapid incident response while maintaining compliance with ICD 503, NIST SP 800-53, RMF, and DISA STIGs.

Qualifications

• Bachelor's degree in CS/IS/Cybersecurity or related field
• 8+ years IT experience, 5+ years administering Splunk Enterprise in large-scale production
• Active TS clearance with SCI eligibility
• Splunk Enterprise Certified Architect
• DoD 8570.01-M IAT-II baseline certification
• Experience in IC/DoD/government cyber environments

Responsibilities

• Install, configure, upgrade, patch, and maintain Splunk Enterprise and ES components.
• Administer indexer and search head clustering for availability and DR.
• Plan capacity, storage tiering, and data retention based on ingest and workloads.
• Develop dashboards, reports, alerts, and SPL searches for SOC and analytics use cases.
• Automate admin tasks with scripting and configuration management (Python, Bash, PowerShell, Ansible).
• Support incident response with rapid search and forensic timeline support.
• Maintain runbooks, SOPs, and change management records.

Education

Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or related field

Tools

Splunk Enterprise

Splunk Enterprise Security

Ansible

Python

PowerShell

Bash

Job description

Amentum is seeking a Systems Administrator - Splunk SME at Fort Meade, MD. You will lead Splunk Enterprise/ES deployment, tuning, and integration in air-gapped and cross-domain environments to support DoD missions.

Security-clearance-relevant expertise and strong scripting are required. Responsibilities include building dashboards, ensuring data quality, and enabling rapid incident response while maintaining compliance with ICD 503, NIST SP 800-53, RMF, and DISA STIGs.