Splunk/Linux Administrator

Title : Splunk/Linux Administrator
Location : Columbia, SC
Duration : 6 + Months
Job Type : C
Description :

Candidate must be able to meet all CUI Requirements.

Splunk administrator that manages the system utilizing linux cluster and management console, applications. 30% - management of daily spunk operation systems.

35% - linux administration

10% - collaborate and liaise with other units and serve as a technical resource and subject matter expert.

15% - contribute to research and development projects as required.

10% - train and advise less skilled systems programmers and provide expert technical assistance for others.

Splunk administration:

The splunk system is installed in a linux cluster. Admin will need a general understanding of linux, daily care of verifying splunk is running properly. Creation of new indexes and updating applications adding new source types, adding new servers and logs to splunk,

Daily verification of license counts, ability to create dashboards (and able to teach others how to make dashboards, use of splunk management console and applications.

Linux administration:

Understand and implement application file permissions. Frequently use version control(git, bitbucket)and configuration management(salt stack, ansible) tools. Configuring/maintaining linux file systems(nfs)

Technical source:

Be a technical source to help windows and linux admins install the splunk uf client and verify logs are flowing to the splunk clusters, general linux and windows knowledge to be able to help with log collection on the client side. Ability to train other admins in advanced log searching techniques. General splunk troubleshooting techniques and knowledge on how to work with splunk (the company)

Splunk architecture:

They will be given access to the cluster. If they are able to find deficiencies in the design, they are welcome to implement the changes.

Splunk upgrades:

Universal forwarders and splunk enterprise version upgrades.

Skills :

Required Skills (rank in order of Importance):

·       5+years of experience with Splunk Administration

·       5+years of experience with Linux Administration

5+ year of experience with Bash Scripting   

Preferred Skills (rank in order of Importance):

·       Experience working in a VDI environment

Required Education:

An Associates degree or equivalent work experience.     

Required Certifications:

Splunk Certification

CUI Requirements:

·       I understand that only the workspaces designated for this project and that are specified in the approved Technology Control Plan (TCP) or granted by the Office of Export Control and Research Security (ECRS), may be used to access, process, store, ortransmit regulated research data.

·       I understand that I must use the Granite Secure VDI to view, store, process, or transmit tregulated research data (CUI, Export Control, etc.) from onsite University work locations and/or my approved remote work site as defined in my approved remotework agreement. (CMMC v2: PE.L2-3.10.6)

The computer screen should not be facing windows, andopen doors where it can be viewed by people who have not been CUI approved andthat they should lock their computer when not being near it