Description:

The Splunk Engineer will be part of a team maintaining various client's Splunk instances with a focus on data onboarding, content development, reporting, and visualizations.
Candidates must have prior Splunk engineering and administration experience and work well in a team environment.
Experience supporting federal customers is a plus.
The role includes access to a comprehensive knowledge base driven by the True Zero community and technical support from the PS team.
Collaboration and growth are encouraged through information sharing and knowledge workshops.
Candidates will have access to an internal Slack channel for team connectivity and necessary tools for training, demos, testing, and professional skill growth.

Requirements:

A Secret Clearance is required for this position.
Candidates must possess the Splunk Enterprise Core Consultant Certification.
The Splunk Enterprise Security Certified Admin certification is also required.
Experience with Splunk IL5 Cloud/ES is necessary.
Candidates should drive ES adoption and use cases.
Preference is given to candidates local to Norfolk, VA.
Experience in designing and implementing distributed Splunk installations, including all Splunk server roles (Search Head, Indexers, Heavy Forwarders, and Universal Forwarders) is required.
Candidates must have experience with advanced configuration of Splunk, including Indexer Clustering and Search Head Clustering.
Experience in maintaining and administering enterprise Splunk implementations is essential.
Candidates should have experience developing custom Splunk content, including scheduled searches, reports, and dashboards.
Proficiency in data onboarding activities, including custom parsing rules and building custom Technology Add-Ons according to Splunk's Common Information Model (CIM), is required.
Experience configuring indexes, index routing, and retention policies is necessary.
Candidates must be familiar with working in Linux and Windows environments and configuring storage subsystems, SELinux, and file permission settings.
Excellent written and oral communication skills are required, along with the ability to manage customer expectations and track engagement scope.

The position offers a competitive salary, paid twice per month.
Employees receive best-in-class medical coverage, with 100% of medical premiums covered by True Zero.
There are company-wide new business incentive programs and contribution incentives for white papers, blog posts, and internal webinars.
Employees start with 3 weeks of PTO and receive 11 paid holidays annually.
A 401k program is available with a 100% company match on the first 4%.
Monthly reimbursement for cell phone and home internet costs is provided.
Paternity and maternity leave are offered.
True Zero invests in training and certifications to help employees broaden and deepen their technical skills.