Description ActioNet has an immediate opportunity for an Splunk Administrator requiring a Public Trust - Level 5 Investigation, located in Washington, DC. ActioNet is an IT service provider and ...
Description ActioNet has an immediate opportunity for an Splunk Administrator requiring a Public Trust - Level 5 Investigation, located in Washington, DC. ActioNet is an IT service provider and ...
ActioNet has an immediate opportunity for an Splunk Administrator requiring a Public Trust - Level 5 Investigation , located in Washington, DC . ActioNet is an IT service provider and solutions ...
Quick apply
ActioNet has an immediate opportunity for an Splunk Administrator requiring a Public Trust - Level 5 Investigation , located in Washington, DC . ActioNet is an IT service provider and solutions ...
ActioNet has an immediate opportunity for an Splunk Administrator requiring a Public Trust - Level 5 Investigation, located in Washington, DC. ActioNet is an IT service provider and solutions ...
ActioNet has an immediate opportunity for an Splunk Administrator requiring a Public Trust - Level 5 Investigation, located in Washington, DC. ActioNet is an IT service provider and solutions ...
Description ActioNet has an immediate opportunity for an Splunk Administrator requiring a Public Trust - Level 5 Investigation, located in Washington, DC. ActioNet is an IT service provider and ...
Description ActioNet has an immediate opportunity for an Splunk Administrator requiring a Public Trust - Level 5 Investigation, located in Washington, DC. ActioNet is an IT service provider and ...
Splunk Administrator
Washington, DC · On-site
Description ActioNet has an immediate opportunity for an Splunk Administrator requiring a Public Trust - Level 5 Investigation, located in Washington, DC. ActioNet is an IT service provider and ...
Splunk Administrator
Washington, DC · On-site
Description ActioNet has an immediate opportunity for an Splunk Administrator requiring a Public Trust - Level 5 Investigation, located in Washington, DC. ActioNet is an IT service provider and ...
Splunk Administrator
Washington, DC · On-site
Description ActioNet has an immediate opportunity for an Splunk Administrator requiring a Public Trust - Level 5 Investigation, located in Washington, DC. ActioNet is an IT service provider and ...
Splunk Administrator
Washington, DC · On-site
Description ActioNet has an immediate opportunity for an Splunk Administrator requiring a Public Trust - Level 5 Investigation, located in Washington, DC. ActioNet is an IT service provider and ...
Splunk Administrator
Washington, DC · On-site
Splunk Administrator Duration: 1+ Year Location: Washington DC Basic Qualifications: - 8 years or 10 years IT experience 3-7 years of experience in infrastructure and application monitoring ...
Splunk Administrator
Washington, DC · On-site
Splunk Administrator Duration: 1+ Year Location: Washington DC Basic Qualifications: - 8 years or 10 years IT experience 3-7 years of experience in infrastructure and application monitoring ...
Splunk Administrator
$150K - $230K/yr
This isn't just another admin gig -- it's your chance to own Splunk across a national security program at one of the highest-clearance sites in the country. You'll optimize logs that matter ...
Quick apply
Splunk Administrator
$150K - $230K/yr
This isn't just another admin gig -- it's your chance to own Splunk across a national security program at one of the highest-clearance sites in the country. You'll optimize logs that matter ...
Splunk Admins with well-defined Splunk App Building experience will be considered. At least a Splunk Administrator certification is required, with growth expectation of achieving Splunk Architect in ...
Splunk Admins with well-defined Splunk App Building experience will be considered. At least a Splunk Administrator certification is required, with growth expectation of achieving Splunk Architect in ...
Splunk Admins with well-defined Splunk App Building experience will be considered. At least a Splunk Administrator certification is required, with growth expectation of achieving Splunk Architect in ...
Splunk Admins with well-defined Splunk App Building experience will be considered. At least a Splunk Administrator certification is required, with growth expectation of achieving Splunk Architect in ...
Splunk Admins with well-defined Splunk App Building experience will be considered. At least a Splunk Administrator certification is required, with growth expectation of achieving Splunk Architect in ...
Splunk Admins with well-defined Splunk App Building experience will be considered. At least a Splunk Administrator certification is required, with growth expectation of achieving Splunk Architect in ...
Must hold a Splunk Admin or Architect cert.
Must hold a Splunk Admin or Architect cert.
Splunk Admins with well-defined Splunk App Building experience will be considered. At least a Splunk Administrator certification is required, with growth expectation of achieving Splunk Architect in ...
Splunk Admins with well-defined Splunk App Building experience will be considered. At least a Splunk Administrator certification is required, with growth expectation of achieving Splunk Architect in ...
Splunk Admins with well-defined Splunk App Building experience will be considered. At least a Splunk Administrator certification is required, with growth expectation of achieving Splunk Architect in ...
Splunk Admins with well-defined Splunk App Building experience will be considered. At least a Splunk Administrator certification is required, with growth expectation of achieving Splunk Architect in ...
Splunk Engineer
Reston, VA · On-site
Support, admin, maintain, and expand Splunk infrastructure to meet future architecture design and deployment requirements * Develop distributed Splunk applications, including requirement gathering ...
Splunk Engineer
Reston, VA · On-site
Support, admin, maintain, and expand Splunk infrastructure to meet future architecture design and deployment requirements * Develop distributed Splunk applications, including requirement gathering ...
Splunk Engineer
Reston, VA · On-site
Support, admin, maintain, and expand Splunk infrastructure to meet future architecture design and deployment requirements * Develop distributed Splunk applications, including requirement gathering ...
Splunk Engineer
Reston, VA · On-site
Support, admin, maintain, and expand Splunk infrastructure to meet future architecture design and deployment requirements * Develop distributed Splunk applications, including requirement gathering ...
Splunk Architect Lead
Reston, VA · On-site
$57.50 - $78.75/hr
Preferred Skills Splunk Certified Admin/Engineer Splunk Core Certified Consultant Active Certified Information System Security Professional (CISSP) Cloud provider certifications (AWS Certified ...
Splunk Architect Lead
Reston, VA · On-site
$57.50 - $78.75/hr
Preferred Skills Splunk Certified Admin/Engineer Splunk Core Certified Consultant Active Certified Information System Security Professional (CISSP) Cloud provider certifications (AWS Certified ...
Splunk Architect Lead
Reston, VA · Hybrid
$57.50 - $78.75/hr
Preferred Skills Splunk Certified Admin/Engineer Splunk Core Certified Consultant Active Certified Information System Security Professional (CISSP) Cloud provider certifications (AWS Certified ...
Splunk Architect Lead
Reston, VA · Hybrid
$57.50 - $78.75/hr
Preferred Skills Splunk Certified Admin/Engineer Splunk Core Certified Consultant Active Certified Information System Security Professional (CISSP) Cloud provider certifications (AWS Certified ...
... Administrator (SCA) Desired Qualifications: • ServiceNow Certified System Administrator (SCSA) • AWS Certification • ITIL v4 Certification • Strong understanding of IT operations, security ...
Quick apply
... Administrator (SCA) Desired Qualifications: • ServiceNow Certified System Administrator (SCSA) • AWS Certification • ITIL v4 Certification • Strong understanding of IT operations, security ...
... Administrator (SCA) Desired Qualifications: • ServiceNow Certified System Administrator (SCSA) • AWS Certification • ITIL v4 Certification • Strong understanding of IT operations, security ...
Quick apply
... Administrator (SCA) Desired Qualifications: • ServiceNow Certified System Administrator (SCSA) • AWS Certification • ITIL v4 Certification • Strong understanding of IT operations, security ...
Splunk Administrator information
What are the key skills and qualifications needed to thrive as a Splunk Administrator, and why are they important?
To thrive as a Splunk Administrator, you need strong knowledge of system administration, log management, and data analysis, typically supported by a bachelor’s degree in IT or related fields. Familiarity with Splunk Enterprise, SPL (Search Processing Language), and certifications like Splunk Certified Power User or Splunk Certified Admin are highly valued. Problem-solving ability, attention to detail, and effective communication are essential soft skills for success in this role. These competencies ensure reliable system performance, efficient data insights, and seamless collaboration with IT and security teams.
How much do Splunk admins make?
Splunk administrators typically earn a median annual salary ranging from $80,000 to $120,000, depending on experience, certifications, and location. Advanced skills in data analysis, scripting, and familiarity with Splunk tools can lead to higher compensation, especially in enterprise environments.
What is the difference between Splunk Administrator vs Security Information and Event Management (SIEM) Analyst?
| Aspect | Splunk Administrator | SIEM Analyst |
|---|---|---|
| Required Certifications | Splunk Certified User, Splunk Core Certified Power User | GIAC Security Essentials, CompTIA Security+ |
| Work Environment | IT teams managing Splunk deployments, data analysis | Security teams monitoring security events, incident response |
| Employer & Industry Usage | Tech, finance, healthcare, any industry using Splunk | Cybersecurity firms, enterprise security departments |
While both roles involve data analysis and security, a Splunk Administrator primarily manages and maintains Splunk platforms, ensuring data ingestion and system performance. In contrast, a SIEM Analyst focuses on analyzing security events, identifying threats, and responding to incidents using SIEM tools, including Splunk. Both roles often collaborate but serve different core functions within an organization's security and data infrastructure.
Who is Splunk's biggest competitor?
Splunk's main competitors include Elastic Stack (Elasticsearch, Logstash, Kibana), IBM QRadar, and LogRhythm, which also offer security information and event management (SIEM) and log management solutions. These companies compete for organizations seeking data analysis, monitoring, and security tools, often requiring knowledge of data indexing, search, and alerting features.
Is Splunk an EDR or SIEM?
Splunk is primarily a SIEM (Security Information and Event Management) platform used for security monitoring, log analysis, and threat detection. It can be extended with apps and add-ons to support EDR (Endpoint Detection and Response) functions, but its core role is as a SIEM tool. As a Splunk Administrator, understanding its SIEM capabilities is essential for managing security data and alerts.
What does a Splunk administrator do?
A Splunk administrator manages and maintains the Splunk platform, ensuring data is properly ingested, indexed, and accessible for analysis. They configure dashboards, set up alerts, troubleshoot issues, and optimize system performance, often requiring knowledge of scripting and security best practices.
What are some common challenges Splunk Administrators face when managing large-scale deployments?
Splunk Administrators often encounter challenges related to indexing large volumes of data, maintaining system performance, and ensuring data security across distributed environments. Managing data retention policies, optimizing search queries, and troubleshooting indexing or forwarding issues are routine tasks that require strong problem-solving skills. Collaboration with security, IT, and development teams is essential to ensure data sources are properly onboarded and dashboards meet organizational needs. Staying current with Splunk updates and best practices is also crucial for scalability and system reliability.
What are Splunk Administrators?
Splunk Administrators are IT professionals responsible for installing, configuring, managing, and maintaining Splunk environments. They ensure that Splunk software runs efficiently, managing data ingestion, indexing, and user access. Their role often includes troubleshooting issues, optimizing performance, and supporting users with dashboards and searches. Additionally, they may be involved in implementing security controls and integrating Splunk with other tools to enhance data analysis and reporting.
What are popular job titles related to Splunk Administrator jobs in Reston, VA? For Splunk Administrator jobs in Reston, VA, the most frequently searched job titles are:
What job categories do people searching Splunk Administrator jobs in Reston, VA look for? The top searched job categories for Splunk Administrator jobs in Reston, VA are:
What cities near Reston, VA are hiring for Splunk Administrator jobs? Cities near Reston, VA with the most Splunk Administrator job openings:
Other
Medical, Dental, Vision, Life, Retirement, PTO
Posted 13 days ago
Job description
Description
ActioNet has an immediate opportunity for an Splunk Administrator requiring a Public Trust - Level 5 Investigation, located in Washington, DC. ActioNet is an IT service provider and solutions integrator headquartered in Vienna, VA that works with the Federal Government and Department of Defense
Salary $ 108,000-128,000
We are seeking an experienced Splunk Administrator to manage and maintain a distributed Splunk installation. The ideal candidate will have a strong background in event log management, custom app creation, and diagnostics, with hands-on expertise in deploying and optimizing Splunk in both Microsoft Windows and Linux environments. The role will involve resolving technical issues, improving system performance, and ensuring the integrity and efficiency of the Splunk environment.
Roles and Responsibilities:
- Architect, configure, deploy, and customize an enterprise-level Splunk environment.
- Manage multi-site index clustering, search head peers, and universal and heavy forwarder deployments.
- Implement and maintain distributed Splunk installations, including cluster master configuration and deployment server management.
- Add new data sources and perform complex data parsing, including regular expressions, index-time, and search-time processing.
- Create custom Splunk apps, including searches, alerts, dashboards, custom JavaScript visualizations, views, and reports.
- Design and implement knowledge object and access control standards across the Splunk environment.
- Troubleshoot and resolve errors in the Splunk stack, utilizing tools like btool.
- Manage SSL certificates for Splunk traffic, including creation, renewal, and configuration.
- Leverage advanced Splunk search language to query and correlate data from multiple sources.
- Plan and implement Splunk premium apps, such as Splunk ES, app for Exchange, and User Behavior Analytics.
- Migrate existing operational processes to Splunk for automation and efficiency.
- Document procedures and create Standard Operating Procedures (SOPs) for Splunk operations.
- Collaborate with the security team to improve visibility and incident response through effective Splunk integration.
Qualifications:
- 2+ years of hands-on experience in designing, configuring, and deploying Splunk in an enterprise environment.
- Splunk Certified Administrator and Power User.
- Experience with multi-site index clustering, search head peers, and forwarder deployments.
- Expertise in event log management, data parsing, and syslog data management.
- Skilled in creating custom Splunk apps, dashboards, and reports.
- Experience in managing SSL certificates for Splunk traffic.
- Proficient in using Splunk's search language and troubleshooting tools like btool.
- Experience with programming languages such as PowerShell, Python, Visual Basic, or C++.
- Strong understanding of security controls, particularly in a federated environment.
- The position aligns with 8140 compliance standards, ensuring the candidate has the necessary expertise in security assessment and authorization, federal information processing standards (FIPS), and risk management frameworks (RMF).
ActioNet is a CMMI-DEV Level 4, CMMI-SVC Level 4, ISO 20000, ISO 27001, ISO 9001, HDI-certified, woman-owned IT Solutions Provider with strong qualifications and expertise in Agile Software Engineering, Cloud Solutions, Cyber Security, and IT Managed Services. With 25+ years of stellar past performance, ActioNet is the premier Trusted Innogrator!
Core Capabilities:
- Advanced and Managed IT Services
- Agile Software Development
- DevSecOps
- Cybersecurity
- Health IT
- C4ISR & SIGINT
- Data Center Engineering & Operations
- Engineering & Installation
Why ActioNet?
At ActioNet, our Passion for Quality is at the heart of everything we do:
- Commitment to Employees: We are committed to making ActioNet a great place to work and continue to invest in our ActioNeters.
- Commitment to Customers: We are committed to our customers by driving and sustaining Service Delivery Excellence.
- Commitment to Community: We are committed to giving back to our community, helping others, and making the world a better place for our next generation.
ActioNet is proud to be named a Top Workplace for the eleventh year in a row (2014 - 2024). We have a 98% customer retention rate. We are passionate about the inspirational missions of our customers, and we entrust our employees and teams to deliver exceptional performance to enable the safety, security, health, and well-being of our nation.
What's in It For You?
As an ActioNeter, you get to be part of an exceptional team and a corporate culture that nurtures mutual success for our customers, employees, and communities. We give you the tools to be successful; all you need to do is bring your best ideas, your energy, and a desire to develop your skills, experience, and career. Are you ready to make a difference?
ActioNet is an equal-opportunity employer and values diversity at our company. We do not discriminate based on race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.
Full-Time Employees are eligible to participate in our ActioNet's Benefits Program:
- Medical Insurance
- Vision Insurance
- Dental Insurance
- Life and AD&D Insurance
- 401(k) Savings Plan
- Education and Professional Training
- Flexible Spending Accounts (FSA)
- Employee Referral and Merit Recognition Programs
- Employee Assistance and Identity Theft Protection
- Paid Holidays: 11 per year
- Paid Time Off (PTO)
- Disability Insurance
About ActioNet
Sourced by ZipRecruiter
Industry
It services
Company size
1,001 - 5,000 Employees
Headquarters location
Vienna, VA, US
Year founded
1998