Job Posting Title:

Splunk Administrator (Sr Systems Administrator)

* ---

Hiring Department:

Applied Research Laboratories

* ---

Position Open To:

All Applicants

* ---

Weekly Scheduled Hours:

40

* ---

FLSA Status:

Exempt

* ---

Earliest Start Date:

Immediately

* ---

Position Duration:

Expected to Continue

* ---

Location:

PICKLE RESEARCH CAMPUS

* ---

Job Details:

Purpose

Build and maintain and standardize the Splunk platform including forwarder deployment, configuration, dashboards and maintenance across numerous isolated UNIX and Windows platforms. Work closely with our information security department to refine Splunk dashboards, create search strings and configure Splunk deployments for security auditing and continuous monitoring requirements. Administration of an isolated Windows system and administration of a security information management application.

Responsibilities

* Maintain and improve Splunk dashboard functionality and visualization for the Information Security department

* Implement and maintain Splunk platform infrastructure and configuration

* Develop reliable, efficient queries, summary indexes, and data models that will feed custom alerts and dashboards

* Use and create dashboards and apps for platform auditing functions

* Monitor the Splunk infrastructure for capacity planning and optimization

* Maintain uniform Splunk dashboards across the organization

* Migrate Splunk dashboards from superseded versions to current versions

* Perform after-the-fact investigations utilizing Splunk capabilities

* Ensure data quality is in line with the use cases and maintain current functional and technical knowledge of the Splunk platform

* Mentor and guide other team members to understand the use case of Splunk

* Provide regular support and guidance to a variety of teams on complex solutions and issue resolutions

* Recommend and deploy Splunk add-ons

* Lead Proof-of-Concepts on Splunk implementation

* Perform system administration for a single isolated Windows 10 information system

* Perform application administration for a single security information management system

* Other related functions as assigned.

Required Qualifications

* HS/GED

* Four years of Splunk administration experience

* One or two year(s) of demonstrated experience at or above the Splunk Core Certified Advanced Power User Certification Level

* Extensive working knowledge of Splunk Search Processing Language (SPL), architecture and various components (indexer, forwarder, search head, deployment server)

* Splunk deployment experience; configuration of Splunk, forwarders, indexes, dashboards, search strings

* The ability to perform onsite configuration and maintenance of Splunk deployments in UNIX and Windows environments

* Practical OS knowledge of Windows and UNIX necessary for constructing effective Splunk search strings

* Working knowledge of SQL and Microsoft SQL Server with the ability to maintain applications built on MS SQL Server

* Standalone Windows 10 System Administration knowledge

* Current DoD 8140.01 compliant certification

US Citizen. Selected applicant is subject to government security investigation and must meet eligibility requirements for access to classified information at the level appropriate to project requirements. Employment is contingent on selected applicant submitting application for access and receiving notification of eligibility within a time period specified in the job offer. Employment must begin within 30 days of confirmation of eligibility. Eligibility for access to classified information must continue without interruption during employment.

Preferred Qualifications

* Bachelor's Degree: Computer Science, Information Systems Management, or related field

* Current Splunk Core Certified Advanced Power User Certification holder (or higher level)

* Eligibility for immediate access to classified information at the level appropriate to the project requirements of the position

* Three years of experience in information assurance in a National Security computing environment

* Three years of experience with the Risk Management Framework methodology

* Knowledge of Classified Information System requirements and government regulations

* Experience with policy creation, documentation preparation and maintenance

* Experience conducting security audits of information systems

* Experience with vulnerability scanning tools (ACAS/Nessus, Retina, MBSA, etc.)

General Notes

An agency designated by the federal government handles the investigation as to the requirement for eligibility for access to classified information. Factors considered during this investigation include but are not limited to allegiance to the United States, foreign influence, foreign preference, criminal conduct, security violations, drug involvement, the likelihood of continuation of such conduct, etc.

Please mark "yes" on the application question that asks if additional materials are required. Failure to attach all additional materials listed below may result in a delay in application processing.

Visit our website (www.arlut.utexas.edu) for additional information about Applied Research Laboratories.

UT Austin offers a competitive benefits package that includes:

* 100% employer-paid basic medical coverage

* Retirement contributions

* Paid vacation and sick time

* Paid holidays

Please visit our Human Resources (HR) website to learn more about the total benefits offered.

Salary Range

$85,000-$100,000 /negotiable depending on qualifications.

Working Conditions

* Standard office conditions

* Repetitive use of a keyboard at a workstation

* Use of manual dexterity

* Some weekend, evening and holiday work

* Possible interstate/intrastate travel

Required Materials

* Resume/CV

* 3 work references with their contact information; at least one reference should be from a supervisor

* Letter of interest

Important for applicants who are NOT current university employees or contingent workers: You will be prompted to submit your resume the first time you apply, then you will be provided an option to upload a new Resume for subsequent applications. Any additional Required Materials (letter of interest, references, etc.) will be uploaded in the Application Questions section; you will be able to multi-select additional files. Before submitting your online job application, ensure that ALL Required Materials have been uploaded. Once your job application has been submitted, you cannot make changes.

Important for Current university employees and contingent workers: As a current university employee or contingent worker, you MUST apply within Workday by searching for Find UT Jobs. If you are a current University employee, log-in to Workday, navigate to your Worker Profile, click the Career link in the left hand navigation menu and then update the sections in your Professional Profile before you apply. This information will be pulled in to your application. The application is one page and you will be prompted to upload your resume. In addition, you must respond to the application questions presented to upload any additional Required Materials (letter of interest, references, etc.) that were noted above.

* ---

Employment Eligibility:

Regular staff who have been employed in their current position for the last six continuous months are eligible for openings being recruited for through University-Wide or Open Recruiting, to include both promotional opportunities and lateral transfers. Staff who are promotion/transfer eligible may apply for positions without supervisor approval.

* ---

Retirement Plan Eligibility:

The retirement plan for this position is Teacher Retirement System of Texas (TRS), subject to the position being at least 20 hours per week and at least 135 days in length.

* ---

Background Checks:

A criminal history background check will be required for finalist(s) under consideration for this position.

* ---

Equal Opportunity Employer:

The University of Texas at Austin, as an equal opportunity/affirmative action employer, complies with all applicable federal and state laws regarding nondiscrimination and affirmative action. The University is committed to a policy of equal opportunity for all persons and does not discriminate on the basis of race, color, national origin, age, marital status, sex, sexual orientation, gender identity, gender expression, disability, religion, or veteran status in employment, educational programs and activities, and admissions.

* ---

Pay Transparency:

The University of Texas at Austin will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information.

* ---

Employment Eligibility Verification:

If hired, you will be required to complete the federal Employment Eligibility Verification I-9 form. You will be required to present acceptable and original documents to prove your identity and authorization to work in the United States. Documents need to be presented no later than the third day of employment. Failure to do so will result in loss of employment at the university.

* ---

E-Verify:

The University of Texas at Austin use E-Verify to check the work authorization of all new hires effective May 2015. The university's company ID number for purposes of E-Verify is 854197. For more information about E-Verify, please see the following:

* E-Verify Poster (English) [PDF]

* E-Verify Poster (Spanish) [PDF]

* Right To Work Poster (English) [PDF]

* Right To Work Poster (Spanish) [PDF]

* ---

Compliance:

Employees may be required to report violations of law under Title IX and the Jeanne Clery Disclosure of Campus Security Policy and Crime Statistics Act (Clery Act). If this position is identified a Campus Security Authority (Clery Act), you will be notified and provided resources for reporting. Responsible employees under Title IX are defined and outlined in HOP-3031.

The Clery Act requires all prospective employees be notified of the availability of the Annual Security and Fire Safety report. You may access the most recent report here or obtain a copy at University Compliance Services, 1616 Guadalupe Street, UTA 2.206, Austin, Texas 78701.