Description:

The Splunk Engineer will be part of a team maintaining various clients' Splunk instances with a focus on data onboarding, content development, reporting, and visualizations.
Candidates must have prior Splunk engineering and administration experience and work well in a team environment.
Experience supporting federal customers is a plus.
The role includes access to a comprehensive knowledge base driven by the True Zero community and technical support from the entire PS team.
True Zero promotes collaboration and growth through information sharing and knowledge workshops.
Candidates will have access to an internal Slack channel for team connectivity and necessary tools for training, demos, testing, and professional skill growth.

Requirements:

Candidates must possess a Splunk Consultant Certification and Splunk ES Accreditation.
The ability to steer IT environments to lower operational risk and enhance service performance is required.
Experience in designing and implementing distributed Splunk installations, including all server roles (Search Head, Indexers, Heavy Forwarders, and Universal Forwarders) is necessary.
Advanced configuration experience with Splunk, including Indexer Clustering and Search Head Clustering, is required.
Candidates must have experience maintaining and administering enterprise Splunk implementations.
Development of custom Splunk content, including scheduled searches, reports, and dashboards, is essential.
Proficiency in data onboarding activities, including custom parsing rules and building custom Technology Add-Ons according to Splunk's Common Information Model (CIM), is required.
Experience in configuring indexes, index routing, and retention policies is necessary.
Candidates should have experience working in both Linux and Windows environments and be able to configure storage subsystems, SELinux, and file permission settings.
Familiarity with different flavors of Linux distributions (RedHat, CentOS, Ubuntu) is required.
Excellent written and oral communication skills are essential, along with the ability to manage customer expectations and track engagement scope.

The position offers a competitive salary, paid twice per month.
Employees receive best-in-class medical coverage, with 100% of medical premiums covered by True Zero.
There are company-wide new business incentive programs and contribution incentives for activities like white papers and internal webinars.
Employees start with 3 weeks of PTO and receive 11 paid holidays annually.
A 401k program is available with a 100% company match on the first 4%.
Monthly reimbursement for cell phone and home internet costs is provided.
Paternity and maternity leave are offered.
True Zero invests in training and certifications to help employees broaden and deepen their technical skills.