Splunk Systems Integration Engineer

$101,400 - $183,300/Yr

Leidos - Baltimore, MD

Full-time

Baltimore, MD

Professional, Scientific, and Technical Services

About the position

We have an IMMEDIATE NEED for a highly skilled Splunk Systems Integration Engineer to join our team supporting our Cloud Splunk environment for the Center for Medicare and Medicaid Services (CMS) in Baltimore, MD. This role involves defining and executing integration engineering activities within a project, which may include concept exploration and assessment, systems integration, GIS integration, legacy systems integration, performance management, technology assessment, testing and validation, and the development and staffing of a systems integration plan. The ideal candidate will possess a strong understanding of Splunk and its various components, including forwarders, indexers, and web interfaces, and will have proficiency in supporting Splunk on Linux in the AWS Cloud. In this position, you will perform concept exploration and assessment, systems integration, and systems of systems integration, while also managing performance and conducting technology assessments. You will support a Senior System Integration Engineer as required and analyze and develop technical documentation detailing the integration and system performance. Your responsibilities will include designing, implementing, and maintaining Splunk environments, ensuring optimal performance, scalability, and security through installation and configuration of Splunk and its components. You will also be responsible for hardening the Splunk environment to meet security compliance standards and best practices. Monitoring and maintaining the health, performance, and capacity of the Splunk infrastructure will be crucial, as will troubleshooting issues related to performance bottlenecks, data ingestion problems, and search optimization. You will create and maintain comprehensive documentation, including architecture diagrams, installation guides, and troubleshooting procedures, while collaborating with cross-functional teams to ensure seamless integration of Splunk within the IT infrastructure. Additionally, you may test the implementation of Internet Protocol version 6 (IPv6) and perform other duties as assigned.

Responsibilities

• Performs concept exploration and assessment, systems integration, systems of systems integration, performance management, technology assessment, testing and validation.
• Supports a Sr. System Integration Engineer, as required.
• Analyzes and develops technical documentation detailing the integration and system performance.
• Design, implement, and maintain Splunk environments including forwarders, indexers, search heads, and deployment servers.
• Install, configure, and integrate Splunk and its components, ensuring optimal performance, scalability, and security.
• Harden the Splunk environment to meet security compliance standards and best practices.
• Monitor Splunk infrastructure health, performance, and capacity; perform routine maintenance tasks to ensure uninterrupted service.
• Troubleshoot issues related to Splunk infrastructure, including performance bottlenecks, data ingestion problems, and search optimization.
• Create and maintain comprehensive documentation including architecture diagrams, installation guides, and troubleshooting procedures.
• Collaborate with cross-functional teams including security, network, and system administrators to ensure seamless integration of Splunk within the IT infrastructure.
• May test implementation of Internet Protocol version 6 (IPv6).
• May perform other duties as assigned.

Requirements

• Bachelor's degree in Computer Science, Engineering, or a related field and a minimum of 10+ years of experience in system administration, database administration, network engineering, software engineering, or software development, with a concentration in Cybersecurity. Experience may be substituted in lieu of degree.
• Eight (8) years of experience with Linux and Windows system administration or an advanced understanding of operating systems and common operating environments.
• Five (5) years of experience administering Splunk in distributed deployments.
• Excellent written and verbal communication skills, ability to work closely with multiple customers, manage expectations and track engagement scope.
• Proficient at data on-boarding activities including routing, parsing, and normalizing events to the Splunk Common Information Model (CIM).
• Proficient onboarding data using Splunk add-ons for Windows, Linux, and common third-party devices and applications.
• Experience onboarding data into Splunk via forwarder, scripted inputs, and modular inputs from a variety of sources.
• Experience with Splunk performing systems administration, including performing installation, configuration, monitoring system performance and availability, upgrades, and troubleshooting.
• General knowledge of networking and security troubleshooting (firewalls, routing, NAT, etc.).
• Splunk implementation and troubleshooting experience.
• Proficiency developing log ingestion and aggregation strategies per Splunk best practices.
• Perform integration activities to configure, connect, and pull data with 3rd party software APIs.
• Ability to autonomously prioritize and successfully deliver results.
• Must have a Splunk Certified Architect certification.
• Must have a DoD 8570 IAT Level II (or Level III) certification (eg Sec+ CE).

Nice-to-haves

• Cloud certification (eg, AWS Solutions Architect Associate, Azure Administrator).
• Certification as a Splunk Certified Architect or Splunk Certified Admin.
• Experience with setting up self-healing components within an application's infrastructure.
• Agile-based knowledge and skill, including experience with Scrum Ceremonies and work management tools (eg, JIRA, Confluence).
• Security Skills-Knowledge of information assurance compliance and information security basics within CMS.