System Administrator 3 (11317)

Motus Recruiting and Staffing - Vancouver, WA

Full-time - Mid Level

Vancouver, WA

Administrative and Support Services

About the position

The System Administrator position at our client's Vancouver, Washington location involves developing, deploying, and maintaining a large data analytics platform that integrates data streams from multiple sources. This role encompasses the full life cycle of system design, from concept through data ingestion and governance, to the creation of dashboards and implementation in medium to large-scale environments using industry-standard data management tools, particularly Splunk. The successful candidate will be responsible for the design, implementation, administration, and maintenance of the overall Splunk infrastructure, ensuring that it meets the needs of the organization while adhering to best practices. In this role, you will capture requirements and assist in system design, focusing on the integration of various data sources. You will be tasked with configuring software and systems, maintaining documentation, and applying change control processes. Troubleshooting technical issues and providing system-related training for the Splunk infrastructure will also be key responsibilities. The position requires hands-on experience with Splunk administration in a multi-site distributed environment, including data onboarding, indexer clustering, and search head clustering. Additionally, you will monitor system updates, plan and execute patch deployments, and provide production and infrastructure support. Your role will involve educating new users on the capabilities of Splunk, monitoring the health of the infrastructure, and conducting capacity reviews. You will also be expected to build automation to improve operations and integrate threat intelligence feeds with other security tools. This position is a one-year renewable contract that includes employee benefits, making it an excellent opportunity for those looking to advance their careers in system administration and data analytics.

Responsibilities

• Configuring applicable software and systems, maintaining local documentation, installing/updating/removing software, applying change control processes and procedures.
• Planning and preparing for future growth, troubleshooting and resolving technical issues, and performing system-related training for Splunk infrastructure.
• Hands-on Splunk administration experience of a multi-site distributed Splunk environment including experience with data onboarding, indexer clustering, search head clustering, and index replication.
• Monitoring Splunk system updates and planning, reviewing, and executing patch/upgrade deployments.
• Performing onboarding of standard and custom data sources in Splunk and using regular expressions to create extractions.
• Providing production and infrastructure support, root cause analysis, troubleshooting, health monitoring, etc.
• Installing and configuring new deployments of Splunk Enterprise and Premium Apps such as Splunk Enterprise Security and Splunk IT Service Intelligence.
• Setting up Splunk Forwarding for new application tiers introduced into the environment.
• Constantly re-evaluating our product to improve architecture, knowledge models, user experience, performance, and stability.
• Understanding current issues and proposing potential Splunk solutions.
• Educating new users on the value that Splunk provides and its technical capabilities.
• Monitoring the Splunk infrastructure (Identify bad searches, dashboards, overall health of Splunk).
• Conducting frequent capacity reviews of Splunk environments.
• Building automation to improve day-to-day operations towards self-service capabilities.
• Integrating threat intelligence feeds and with other security tools to facilitate automation.
• Performing deployments of Splunk configurations using Splunk Deployment Server, Cluster Master, and Deployer to support data onboarding and other maintenance/upgrade activities.
• Developing search queries for support incident investigative efforts to correlate events.
• Defining, developing, implementing, tuning and monitoring processes and procedures to support and maintain Splunk ES and ITSI, enabling proactive issue identification and resolution.
• Configuration management of Splunk ES and ITSI with future growth in mind to enable a balance between scalability, performance, stability, reliability, and agility.
• Applying expertise in Splunk administration in UNIX/Linux and troubleshooting OS-level issues.
• Working with the Automation Team to leverage solutions, including Puppet, SCCM, for managing multiple Splunk deployments.

Requirements

• A degree in Computer Science, Information Technology, or a directly related technical discipline is preferred.
• With an associate degree in applicable fields, 8 years of experience is required.
• With a bachelor's degree in applicable fields, 6 years of experience is required.
• Without an applicable degree, 10 years of progressive hands-on experience in design, implementation, and support of moderate to complex Splunk Solutions is required.
• Experience must include direct work experience in Information Technology performing System Administration.
• Experience includes a minimum combination of work-related experience, on-the-job training, and/or vocational training.
• Experience using specific technologies such as Splunk, Remote Desktop Services, IIS, Wireshark, Trend Micro, Nessus, Ivanti, Puppet, PowerShell.
• Solid grasp of best practices as recommended by Splunk.
• Install, configure, test, and maintain Splunk application, related software, and system management tools.
• Experience setting up Splunk Forwarding for new application tiers introduced into the environment.
• Drive performance improvements, maintain patch levels and assist in performing system upgrades.
• Work with application owners to define requirements and build custom searches and dashboards.
• Experience with administration in both the Linux and Windows operating systems; comfortable on the command line interface, including writing python and basic shell scripts.
• Working knowledge or recent experience with scripting languages (bash, python, or Perl), networking, system administration, databases, and analytical tools.
• Experience with following Change Management systems and ticketing management systems.

Benefits

• Employee benefits included with the contract position.