Systems Analyst Advanced (Splunk / Linux Administrator) - SA 26-01560

Job Title

Systems Analyst Advanced (Splunk / Linux Administrator)

Location: Remote
Duration: 6 Months

Project Overview

This is a 6-month contract supporting a large enterprise IT organization focused on the design, development, and ongoing support of Splunk and Linux-based systems. The role supports secure environments handling regulated data and requires strict adherence to Controlled Unclassified Information (CUI) requirements.

Key Responsibilities

The selected candidate must meet all CUI compliance requirements.

This role serves as a Splunk Administrator and Linux Systems Analyst, responsible for daily operations, platform administration, architecture improvements, and technical mentorship.

Responsibility Breakdown

• 30% Administration and management of daily Splunk operations

• 35% Linux system administration

• 10% Collaboration and liaison work; serving as a technical Subject Matter Expert (SME)

• 15% Contribution to research and development initiatives

• 10% Training and mentoring junior systems staff

Splunk Administration Duties

• Administer Splunk Enterprise deployed on a Linux cluster

• Monitor Splunk health and availability; ensure services are running correctly

• Create and manage indexes, applications, and source types

• Onboard new servers and log sources into the Splunk environment

• Perform daily license usage verification

• Build dashboards and reports; train others on dashboard creation

• Utilize Splunk Management Console and apps for monitoring and configuration

• Perform Splunk troubleshooting and coordinate with vendor support as needed

• Execute Splunk Enterprise and Universal Forwarder upgrades

Linux Administration Duties

• Administer Linux systems supporting Splunk clusters

• Configure and maintain file permissions and access controls

• Manage Linux file systems including NFS

• Use configuration management and automation tools such as:

  • Git / Bitbucket

  • SaltStack

  • Ansible

• Develop and maintain Bash scripts to support system operations

Technical SME & Collaboration

• Serve as a technical resource for Windows and Linux administrators

• Assist with installation and validation of Splunk Universal Forwarder clients

• Ensure logs are properly flowing from endpoints to Splunk clusters

• Provide advanced training on Splunk search and analytics techniques

• Support client-side log collection across Windows and Linux platforms

Splunk Architecture & Optimization

• Review existing Splunk cluster architecture

• Identify design gaps or inefficiencies

• Implement approved architectural improvements to enhance performance, scalability, or reliability

Required Education

• Associate degree in a technical field or equivalent relevant work experience

Required Skills (Ranked)

• 5+ years of Splunk Administration experience

• 5+ years of Linux Administration experience

• 5+ years of Bash scripting experience

Preferred Skills

• Experience working in VDI-based environments

CUI Compliance Requirements

• Only approved workspaces defined in the Technology Control Plan (TCP) may be used to access, process, store, or transmit regulated data

• Regulated data must be accessed exclusively through an approved secure VDI environment from authorized onsite or approved remote locations

• Workstations must be positioned to prevent unauthorized viewing and must be locked when unattended