Description:

The Splunk Engineer will be part of a team maintaining various client's Splunk instances with a focus on data onboarding, content development, reporting, and visualizations.
Candidates must have prior Splunk engineering and administration experience and work well in a team environment.
Experience supporting federal customers is preferred.
The role includes access to a comprehensive knowledge base driven by the True Zero community and technical support from the PS team.
True Zero promotes collaboration and growth through information sharing and knowledge workshops.
Candidates will have access to an internal Slack channel for team connectivity and necessary tools for training, demos, testing, and professional skill development.

Requirements:

Candidates must possess a Splunk Core Consultant Certification and Splunk Enterprise Security Accreditation.
Federal Government work experience is preferred.
Experience in designing and implementing distributed Splunk installations, including all server roles (Search Head, Indexers, Heavy Forwarders, and Universal Forwarders).
Advanced configuration experience with Splunk, including Indexer Clustering and Search Head Clustering.
Experience in maintaining and administering enterprise Splunk implementations.
Ability to develop custom Splunk content, including scheduled searches, reports, and dashboards.
Proficiency in data onboarding activities, including custom parsing rules and building custom Technology Add-Ons according to Splunk's Common Information Model (CIM).
Experience in configuring indexes, index routing, and retention policies.
Familiarity with Linux and Windows environments, including configuring storage subsystems, SELinux, and file permission settings.
Excellent written and oral communication skills, with the ability to manage customer expectations and track engagement scope.

The position offers a competitive salary, paid twice per month.
Employees receive best-in-class medical coverage, with 100% of medical premiums covered by True Zero.
There are company-wide new business incentive programs and contribution incentives for white papers, blog posts, and internal webinars.
Employees start with 3 weeks of PTO and receive 11 paid holidays annually.
A 401k program is available with a 100% company match on the first 4%.
Monthly reimbursement for cell phone and home internet costs is provided.
Paternity and maternity leave are included.
True Zero invests in training and certifications to help employees broaden and deepen their technical skills.