Splunk Engineer SME

Overview

Splunk Engineer SME Chantilly, VA TS/SCI with Poly Bridge Core provides high energy, unified teams; technology integration experience; and innovative approaches, to enable our clients’ mission.  We enable our clients’ mission by integrating innovative technologies and implementing adoption processes that modernize the digital workplace.  Our trusted, skilled, and diverse team members are making a lasting impact by building tailored, client focused solutions. Do you want to join a team that is building tailored technical solutions to modernize our government’s mission and our client’s business?  Do you have a desire to change how people work?  Are you interested in helping to protect our nation’s cyber interests? Join our growing team supporting the government agencies in its mission as a Splunk Engineer in Chantilly, VA.

Responsibilities

The monitoring team uses Splunk to collect detailed system audit and performance logs necessary for system accreditation, troubleshooting, and security reporting. The team is responsible for collection of these data and working with system owners and users to get the most out of the data collection. The Sponsor needs proficiency in creating dashboards to assist stakeholders with troubleshooting, managing data feeds status, and managing audit logs from applications. Work will include collecting and reporting of hosted systems.  

• Maintain clustered Splunk infrastructure, including search head and index cluster, deployment server, deployer, license manager, heavy and universal forwarders, Distributed Management Console (DMC)
• Onboard new data sources, monitor the health of existing data feeds. 
• Deploy and manage Splunk apps, including writing custom apps where needed.
• Design and implement data flow and accesses across different networks and system interfaces, for example between Splunk and AWS, or between Splunk and network devices. 
• Perform routine maintenance tasks such as adding or deleting indexes, sizing volumes, adding data inputs, patching the OS and upgrading Spunk, automation of routine tasks. 
• Troubleshoot data flow interruptions, data quality issues, performance issues.
• Collaborate with other functional teams such as network, storage, security to provide Splunk service where needed across entire customer network
• Document architecture, how-to guides, troubleshooting documents.
• Create dashboards to assist stakeholders with troubleshooting, managing data feeds status, and managing audit logs from applications. 
• Collect information for reporting on hosted systems. 

Qualifications

Required Qualifications:   

• Demonstrated experience working with Splunk and Linux.
• Demonstrated experience understanding Splunk distributed architecture and data pipelines, with hands-on implementation.
• Demonstrated experience with Splunk client management and apps management.
• Demonstrated experience with integrating Splunk with various data sources such as syslog, flat files, databases, APIs, cloud platform logs, HEC endpoints.
• Demonstrated experience with Splunk SPL to create searches, reports, alerts, and dashboards.
• Demonstrated experience with Splunk conf files to manage inputs, props, transforms, and similar.
• Demonstrated experience with fluency with Linux OS (RHEL or Rocky 8) and Command Line Interface (CLI)
• Demonstrated experience with scripting languages such as Bash, Python.
• Demonstrated experience with powershell for task automation.
• Demonstrated experience with custom apps development.
• Demonstrated experience with Regular Expression.
• Demonstrated experience with AWS SDK and CLI to programmatically interface with AWS. 

What you can expect from us

Bridge Core is proud to be an equal opportunity workplace and affirmative action employer. We celebrate diversity and are committed to creating an inclusive environment for all team members and applicants. At Bridge Core, we ensure fair treatment for our team members and applicants based on their abilities, achievements and experience without regard to race, national origin, sex, age, disability, veteran status, sexual orientation, gender identity or any other classification protected by law.

 

Bridge Core does not have a vaccination mandate applicable to team members. Vaccination requirements will depend on the status of the federal contractor mandate and customer site requirements.  Regardless of vaccination status , personnel are required to wear masks while indoors when the CDC COVID-19 Community Level is High.