SR Splunk Engineer

Program Overview

Cybersecurity experts, Scrum and Agile professionals and engineers (systems, software, network, and cloud reliability) design and sustain cloud infrastructure to host spacecraft command and control systems. Infrastructure as a Service (IaaS), Antenna as a Service (AaaS), Data as a Service (DaaS), and an active Admin Wide Area Network (AWAN) team are provided.

About The Role

Peraton is seeking a Senior Splunk E ngineer , in our Chantilly , VA office in support of a Department of Defense (DoD) Community customer. The engineer will be responsible for the design, implementation, optimization, and maintenance of the enterprise Splunk platform for a private cloud-based program . This role involves ensuring the stability and performance of the environment, integrating new data sources, developing complex search queries, and building dashboards and reports to support critical business and security operations . Join us and be part of the next generation of innovators as we blaze a trail forward for our profession and company.

What Y ou’ll D o

• Platform Management: Install, configure, and maintain all components of a distributed Splunk environment (Indexers, Search Heads, Forwarders, Deployment Servers, License Manager , etc. )
• Data Onboarding: Integrate new logs and data sources from various systems ( e.g. operating systems, network devices, applications, security tools) using universal and heavy forwarders, ensuring efficient ingestion and parsing.
• Search & Content Development: Develop and optimize complex Search Processing Language (SPL) queries, alerts, reports, and visualizations to meet the needs of security, application, and operations teams.
• Performance & Optimization: Tune the Splunk environment for optimal performance, ensuring data retention policies are met, and managing storage/indexing tiering ( e.g. hot/warm/cold, and smart store)
• Automation: Utilize scription ( e.g. Python, Shell) and confi gura tion management tools ( e.g. Ansible, Helm) to automate Splunk deployment, configuration, and data source onboarding processes
• Documentation & Training: Create and maintain detailed documentation for the Splunk architecture, processes, and content, and provide training to end-user and administrators

Qualifications

Required Q ualifications:

• Associates degree and 10+ years of experience in a Systems Engineering related field; OR bachelor’s degree in Computer Science, Computer Engineering, or related field and 8+ years of experience in a Systems Engineering related field; OR a master's degree in Computer Science, Computer Engineering, or related field and 6+ years of experience in a Systems Engineering related field. Additional Four (4) years of relevant experience will be considered in lieu of a bachelor’s degree
• This position requires the candidate possess a minimum of Top-Secret clearance with the ability to obtain TS/SCI. The candidate must maintain the clearance.
• 3+ years of hands-on experience as a Splunk Administrator or Engineer in a large, distributed enterprise environment.
• Advanced proficiency in writing and optimizing complex Search Processing Language (SPL) queries.
• Deep understanding of Splunk architecture, including clustering, data ingestion, pipelines, and best practices for scaling.
• Strong working knowledge of Linux/Unix and Windows operating systems for deployment and troubleshooting
• Strong working knowledge of Kubernetes platform for deployment and troubleshooting
• Experience with scripting languages ( e.g. Python or Shell) for automation tasks.
• Fundamental understanding of networking concepts (TCP/IP, firewalls) relevant to log collection and data transfer.
• Hold a current Splunk Core Certified Power User or Splunk Admin certification

Desired Qualifications:

• Excellent problem-solving and analytical skills.
• Strong communications skills (written and verbal) to translate technical concepts to non-technical stakeholders.
• Ability to work effectively independently and as part of a team.
• Certifications : Splunk Certified Architect or specialized Splunk certifications ( e.g. Splunk Enterprise Security Certified Admin).

Benefits:

Peraton offers enhanced benefits to employees working on this critical National Security program, which include heavily subsidized employee benefits coverage for you and your dependents, 25 days of PTO accrued annually up to a generous PTO cap and eligible to participate in an attractive bonus plan

#Metroplex

#LI-PY1

SCA / Union / Intern Rate or Range

Details

Target Salary Range: $135,000 - $216,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

Benefits Statement: Peraton offers eligible employees a variety of benefits including medical, dental, vision, life, health savings account, short/long term disability, EAP, parental leave, 401(k), paid time off (PTO) for vacation, and company paid holidays. A full listing of available benefits can be viewed at

Application Duration Statement: The application period for the job is estimated to be 30 days from the job posting date. However, this timeline may be shortened or extended depending on business needs and the availability of qualified candidates.

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.