System Administrator III (Splunk)

Abacus Technology Corporation; Johnstown (AL); On-site; USD 85,000 - 115,000; Full time

Job summary

Abacus Technology Corporation is seeking a Systems Administrator to provide Splunk support for the AFINC III program at Maxwell AFB/Gunter Annex. This full-time role requires expertise in Splunk deployments on Red Hat Enterprise Linux and security-conscious operations.

You will design and maintain clustered Splunk infrastructure, develop apps, dashboards, and reports, and ensure data ingestion and performance meet mission requirements.

Qualifications

• 5+ years of experience in systems administration.
• HS diploma or GED.
• Security+ certified.
• Must hold one of the listed Splunk certifications.
• Experience with Splunk on RHEL (installations, configurations, monitoring, upgrades, dashboard design).
• Strong familiarity with RHEL administration.
• Strong understanding of network protocols, security frameworks, and compliance standards.
• Excellent communication and analytical skills.
• Must be a US citizen with a current Secret clearance.

Responsibilities

• Design, deploy, configure, and manage Splunk clustered infrastructure on RHEL (indexers, search heads, forwarders, deployment servers).
• Administer Splunk Apps and develop or extend apps for specialized functionality.
• Develop and implement strategies for data ingestion, parsing, indexing, and ensuring availability and performance of Splunk data repositories.
• Consult with teams to customize searches, reports, dashboards and configure Splunk to meet requirements.
• Create and maintain documentation detailing architecture components, configurations, monitoring and alerting setup, troubleshooting guides, and checklists.
• Implement and maintain security controls in line with DISA STIG requirements.

Skills

Systems administration

Splunk expertise

Security+

US citizen

Education

HS diploma or GED

Tools

Splunk

Red Hat Enterprise Linux (RHEL)

Secret clearance

Job description

Overview

Abacus Technology is seeking a Systems Administrator to provide Splunk support for the Air Force Intranet Control (AFINC) III Support program at Maxwell AFB/Gunter Annex. This is a full-time position.

Responsibilities

• Design, deploy, configure, and manage Splunk clustered infrastructure on RHEL, including Splunk indexers, search heads, forwarders, and deployment servers.
• Administer Splunk Apps to include developing new or extending existing apps to perform specialized functionality.
• Develop and implement strategies for efficient data ingestion, parsing, and indexing, ensuring availability and optimal performance of Splunk data repositories.
• Consulting with teams to customize searches, reports, dashboards and configure Splunk to meet their requirements.
• Create and maintain documentation detailing architecture components, configurations, monitoring and alerting setup, troubleshooting guides, and checklists.
• Implement and maintain security controls, and data protection measures in line with best practices and DISA STIG requirements.

Qualifications

5+ years experience in systems administration. HS diploma or GED. Must be Security+ certified. Must hold one of the following certifications: Splunk Core Certified Power User, Splunk Core Certified Advanced Power User, Splunk Enterprise Certified Administrator, or Splunk Enterprise Security Certified Administrator. Experience with Splunk performing systems administration, including installations, configurations, monitoring system performance and availability, upgrades, troubleshooting, and dashboard design in a Red Hat Enterprise Linux environment (RHEL). Strong familiarity with Red Hat Enterprise Linux (RHEL) administration. Strong understanding of network protocols, security frameworks, and compliance standards. Excellent communication skills, both oral and written, analytical skills to troubleshoot issues, and an ability to conceptualize server infrastructures and configurations. Must be a US citizen and hold a current Secret clearance.

Applicants selected will be subject to a U.S. government security investigation and must meet eligibility requirements for access to classified information.

EOE/M/F/Vet/Disabled