TS/SCI Cleared Splunk Engineer — ITSI & Cloud Automation

CACI; United States; On-site; USD 113,000 - 238,000; Full time

Job summary

CAC I is seeking a Splunk Engineer with 8+ years of experience to manage a Splunk Platform and develop ITSI-based apps. You will build dashboards, automate maintenance, and onboard new data sources for government customers.

The role requires TS/SCI with Poly clearance, Scrum/Agile collaboration, and strong Linux security and cybersecurity compliance knowledge. Experience with AWS/Azure and Splunk certifications is highly valued.

Qualifications

• BA/BS degree required; 8+ years IT experience if no degree
• 8+ years experience supporting IT systems
• 4+ years implementing and operating Splunk (universal and heavy forwarders, search heads, deployment server, indexes)
• Splunk Enterprise, IT Service Intelligence, Log Management experience
• Knowledge of RMF/IA security standards
• Excellent problem solving and collaboration skills
• Splunk IT Service Intelligence (ITSI) and Splunk Certified Admin certifications preferred
• Experience with Linux security and cybersecurity compliance

Responsibilities

• Design scripts to automate Splunk maintenance and alerting
• Develop dashboards and reports for business-critical insights
• Create scalable security architectures with standard integrations
• Onboard new data sources and ensure data quality
• Support cloud deployments (AWS and Azure) and cyber compliance tasks
• Collaborate with product owners and IT teams to resolve issues
• Provide training and support to IT staff on Splunk usage
• Develop integration scripts for enterprise security services
• Document configurations and procedures

Skills

Splunk

ITSI

RMF/IA

Linux security

Communication

Collaboration

Training IT staff

Scripting

Education

BA/BS degree

AA/AS with 10 years experience

Tools

Python

Perl

JavaScript

AWS

Azure

Job description

CAC I is seeking a Splunk Engineer with 8+ years of experience to manage a Splunk Platform and develop ITSI-based apps. You will build dashboards, automate maintenance, and onboard new data sources for government customers.

The role requires TS/SCI with Poly clearance, Scrum/Agile collaboration, and strong Linux security and cybersecurity compliance knowledge. Experience with AWS/Azure and Splunk certifications is highly valued.