System Administrator III (Splunk)

Abacus Technology Corporation; Montgomery (AL); On-site; USD 90,000 - 120,000; Full time

Job summary

Abacus Technology Corporation seeks a Systems Administrator to provide Splunk support for the AF Intranet Control III Support program at Maxwell AFB/Gunter Annex. This full-time role requires 5+ years of systems administration experience, Security+ certification, and Splunk certifications.

Candidates must be a US citizen with a current Secret clearance and be able to work on-site at Maxwell AFB/Gunter Annex.

Qualifications

• 5+ years experience in systems administration.
• Must be Security+ certified.
• Must hold one of the following Splunk certifications: Splunk Core Certified Power User, Splunk Core Certified Advanced Power User, Splunk Enterprise Certified Administrator, or Splunk Enterprise Security Certified Administrator.
• Experience with Splunk in a Red Hat Enterprise Linux environment (RHEL).
• US citizen and hold a current Secret clearance.

Responsibilities

• Design, deploy, configure, and manage Splunk clustered infrastructure on RHEL, including indexers, search heads, forwarders, and deployment servers.
• Administer Splunk Apps to develop or extend apps for specialized functionality.
• Develop and implement strategies for data ingestion, parsing, and indexing with availability and performance in mind.
• Configure searches, reports, dashboards to meet requirements.
• Create and maintain architecture, configurations, monitoring/alerting, troubleshooting guides, and checklists.
• Implement and maintain security controls in line with DISA STIG requirements.

Skills

Systems administration

Security concepts

Communication skills

Analytical

Education

HS diploma or GED

Tools

Splunk

Red Hat Enterprise Linux (RHEL)

Job description

Overview

Abacus Technology is seeking a Systems Administrator to provide Splunk support f or the Air Force Intranet Control (AFINC) III Support program at Maxwell AFB/Gunter Annex . This is a full-time position.

Responsibilities

• Design, deploy, configure, and manage Splunk clustered infrastructure on RHEL, including Splunk indexers, search heads, forwarders, and deployment servers.


• Administer Splunk Apps to include developing new or extending existing apps to perform specialized functionality.


• Develop and implement strategies for efficient data ingestion, parsing, and indexing, ensuring availability and optimal performance of Splunk data repositories.


• Consulting with teams to customize searches, reports, dashboards and configure Splunk to meet their requirements.


• Create and maintain documentation detailing architecture components, configurations, monitoring and alerting setup, troubleshooting guides, and checklists.


• Implement and maintain security controls, and data protection measures in line with best practices and DISA STIG requirements.

Qualifications

5+ years experience in systems administration. HS diploma or GED. Must be Security+ certified. Must hold one of the following certifications: Splunk Core Certified Power User, Splunk Core Certified Advanced Power User, Splunk Enterprise Certified Administrator, or Splunk Enterprise Security Certified Administrator. Experience with Splunk performing systems administration, including installations, configurations, monitoring system performance and availability, upgrades, troubleshooting, and dashboard design in a Red Hat Enterprise Linux environment (RHEL). Strong familiarity with Red Hat Enterprise Linux (RHEL) administration. Strong understanding of network protocols, security frameworks, and compliance standards. Excellent communication skills, both oral and written, analytical skills to troubleshoot issues, and an ability to conceptualize server infrastructures and configurations. Must be a US citizen and hold a current Secret clearance.

Applicants selected will be subject to a U.S. government security investigation and must meet eligibility requirements for access to classified information. EOE/M/F/Vet/Disabled