Splunk Sme Jobs (NOW HIRING)

Job Summary:
PlanIT Group, LLC is seeking an experienced Splunk Subject Matter Expert with strong Engineering skills to join their dynamic team. The ideal candidate will be responsible for designing, deploying, and maintaining on-premises and cloud-based Splunk environments to support enterprise-level monitoring, alerting, and reporting.
Responsibilities:
• designing, deploying, and maintaining on-premises and cloud based Splunk environments to support enterprise-level monitoring, alerting, and reporting
• collaborate across DevOps, Security, and IT teams to optimize performance, ensure data integrity, system availability and support mission-critical operations
• manage knowledge objects (fields, extractions, tags, event types, lookups, workflow actions, aliases, macros, etc.)
• experience with Splunk deployment and configuration management in large-scale environments
• writing complex Splunk queries, dashboards, and alerts using SPL (Search Processing Language)
• analyze and troubleshoot complex data ingestion and parsing issues
• designing and developing an automations workflow and dashboard interface
• mentor and guide junior researchers or team members
• leverage the Splunk AI Assistant and other AI tools to increase accuracy and efficiency of tasks
• advanced knowledge of Unix/Linux and/or Windows systems administration and troubleshooting
• scripting skills in Bash, Python, JavaScript, SQL and PowerShell for automation and integration tasks
• experience with Splunk upgrades, patching, and performance tuning
• integrating Splunk with cloud platforms (AWS, GCP, Azure)
• implementing role-based access controls (RBAC) in Splunk
• knowledge of logging standards and best practices across application and infrastructure layers
• execute new projects as well as data and user onboarding
• understanding of IT and Cyber industry standards and technologies to include controls governed by NIST, FISMA, and FedRamp
• installing and utilizing and developing with the Splunk App for Data Science and Deep Learning
• installing and utilizing and developing with the Splunk SOAR Automation toolset
• experience or background in the Cybersecurity, Systems/Network Administration or Observability industry
Qualifications:
Required:
• 5+ Years of Splunk Experience Required
• Manages knowledge objects (fields, extractions, tags, event types, lookups, workflow actions, aliases, macros, and so on) – through automations, scripting, management server functions; to include .conf and .cfg files in scope of the last four Splunk Enterprise versions
• Experience with Splunk deployment and configuration management in large-scale environments
• Proficiency in writing complex Splunk queries, dashboards, and alerts using SPL (Search Processing Language)
• Experience with REST APIs for Splunk and external system integration
• Ability to analyze and troubleshoot complex data ingestion and parsing issues
• Designing and developing an automations workflow and dashboard interface for such
• Self-starter with a service-oriented mindset who will take action, find ways to solve problems, and move projects to conclusion independently
• Strong problem-solving skills and the ability to translate research insights into practical solutions that address real-world challenges.
• Strong communication and collaboration skills with the ability to articulate complex technical concepts to both technical and non-technical audiences.
• Experience in mentoring and guiding junior researchers or team members
• A minimum of eight (8) to twelve (12) years’ relevant experience.
• A degree from an accredited College/University in the applicable field of services is required. If the individual's degree is not in the applicable field then four additional years of related experience is required.
• Pass a client mandated clearance process to include drug screening, criminal history check and credit check.
• All candidates must be a US Citizen or permanent status Green Card holder.
• Cannot have more than 6 months travel outside the United States within the last five years. Military Service excluded.
Preferred:
• Ability to leverage the Splunk AI Assistant and other AI tools to increase accuracy and efficiency of task and other deliverables
• Advanced knowledge of Unix/Linux and/or Windows systems administration and troubleshooting
• Strong scripting skills in Bash, Python, JavaScript, SQL and PowerShell for automation and integration tasks
• Experience with Splunk upgrades, patching, and performance tuning
• Proficiency in integrating Splunk with cloud platforms (AWS, GCP, Azure)
• Understanding of security and compliance requirements and implementation of role-based access controls (RBAC) in Splunk
• Strong knowledge of logging standards and best practices across application and infrastructure layers
• Extensive knowledge of defense-in-depth principles, Network and Security architecture, network topology, IT device integrity, and common security elements.
• Executes new projects as well as data and user onboarding
• Strong understanding of IT and Cyber industry standards and technologies to include such controls governed by NIST, FISMA, and FedRamp
• Experience installing and utilizing and developing with the Splunk App for Data Science and Deep Learning.
• Experience installing and utilizing and developing with the Splunk SOAR Automation toolset
• Experience or background in the Cybersecurity, Systems/Network Administration or Observability industry
Company:
PlanIT Group is an IT and engineering professional services company which provides top-tier talent to various commercial and government customers. Founded in 2010, the company is headquartered in Charlotte, USA, with a team of 51-200 employees. The company is currently Growth Stage.