Splunk Admin

Job ID: SC-9801

Remote Splunk/Linux Admin (Splunk Certification must) with Bash Scripting, VDI, git/bitbucket, saltstack/ansible experience

Location: Clemson, SC (Clemson University
Duration: 6 Months
Work Location: Role is 100% remote
Candidate location: No SC residency required. Candidates must reside in lower 48 states (Continental US) and comfortable working EST time zone hours.

REQUIRED SKILLS (RANK IN ORDER OF IMPORTANCE):
5+ years of experience with Splunk Administration
5+ years of experience with Linux Administration
5+ year of experience with Bash Scripting

PREFERRED SKILLS (RANK IN ORDER OF IMPORTANCE):
Experience working in a VDI environment

REQUIRED EDUCATION:
An Associates degree or equivalent work experience.

REQUIRED CERTIFICATIONS:
Splunk Certification

CUI REQUIREMENTS:
I understand that only the workspaces designated for this project and that are specified in the approved Technology Control Plan (TCP) or granted by the Office of Export Control and Research Security (ECRS), may be used to access, process, store, or transmit regulated research data.
I understand that I must use the Granite Secure VDI to view, store, process, or transmit regulated research data (CUI, Export Control, etc.) from onsite University work locations and/or my approved remote work site as defined in my approved remote work agreement. (CMMC v2: PE.L2-3.10.6)
The computer screen should not be facing windows, and open doors where it can be viewed by people who have not been CUI approved and that they should lock their computer when not being near it

Statement of Work (SOW) for Contingent Labor Request
SCOPE OF THE PROJECT:
This will be a 6 month contract working for Clemson University Information Technology Center on design and development of Splunk and Linux systems.

DAILY DUTIES / RESPONSIBILITIES:
Candidate must be able to meet all CUI Requirements.

Splunk administrator that manages the system utilizing linux cluster and management console applications. 30% management of daily spunk operation systems.
35% linux administration
10% collaborate and liaise with other units and serve as a technical resource and subject matter expert.
15% contribute to research and development projects as required.
10% train and advise less skilled systems programmers and provide expert technical assistance for others.

Splunk administration:
The splunk system is installed in a linux cluster. Admin will need a general understanding of linux, daily care of verifying splunk is running properly. Creation of new indexes and updating applications adding new source types, adding new servers and logs to splunk,
Daily verification of license counts, ability to create dashboards (and able to teach others how to make dashboards, use of splunk management console and applications.

Linux administration:
Understand and implement application file permissions. Frequently use version control(git, bitbucket) and configuration management(saltstack, ansible) tools. Configuring/maintaining linux file systems(nfs)

Technical source:
Be a technical source to help windows and linux admins install the splunk uf client and verify logs are flowing to the splunk clusters, general linux and windows knowledge to be able to help with log collection on the client side. Ability to train other admins in advanced log searching techniques. General splunk troubleshooting techniques and knowledge on how to work with splunk (the company)

Splunk architecture:
They will be given access to the cluster. If they are able to find deficiencies in the design, they are welcome to implement the changes.

Splunk upgrades:
Universal forwarders and splunk enterprise version upgrades.