Splunk Admin Data Jobs

1 job found

Today

Cybersecurity Analytics Systems Administrator

Peraton MacDill AFB, FL

MacDill AFB, FL

Today

$66k - $106k/yr Full time Analytics Cybersecurity Tools Data Platform

Apply Now

Job Description

Peraton is seeking a Cybersecurity Analytics Systems Administrator to support daily operations and ongoing health monitoring for enterprise security data and analytics platforms for SITEC 3 EOM. This onsite role at Macdill AFB, FL focuses on keeping centralized SIEM environments available, secure, and reliable through administration, ingestion oversight, upgrades, and troubleshooting.

The position is responsible for managing user access and platform configurations across Splunk and Microsoft Sentinel, administering the underlying Red Hat Enterprise Linux (RHEL) systems, and ensuring data collection agents and ingestion pipelines operate correctly. You will also support analysts by addressing routine issues in dashboards and queries while tracking operational performance and data integrity.

Key Responsibilities

Administer user access with RBAC, index permissions, and routine configurations across Splunk Enterprise, Splunk ES, and Microsoft Sentinel workspaces.
Maintain and administer underlying RHEL servers, including OS-level user management, disk space allocation, system auditing, package updates, and STIG hardening.
Deploy, configure, and maintain data collection agents such as Splunk Universal/Heavy Forwarders, Sentinel Azure Monitor, and syslog daemons to support dependable data flow.
Monitor platform operational health, including indexer status, search head performance, and disk utilization across hot/warm/cold storage tiering to prevent data loss or disruption.
Run scheduled upgrades and minor updates, including Splunk technology add-on (TA) updates and SSL/TLS certificate renewals across deployment tiers.
Troubleshoot ingestion failures and related issues such as broken forwarder feeds, missing sourcetypes, and basic search query performance problems submitted by analysts.
Perform scheduled configuration backups (for example, Splunk etc directory snapshots and Sentinel workspace templates) and verify restoration procedures.
Create alerts and notifications for unusual activity, including security breaches or system failures.
Maintain documentation of system configurations and changes, and perform basic troubleshooting to identify causes when issues occur.
Analyze data to identify patterns, trends, or other useful information.
Support users experiencing system problems or incorrect usage.
Manage dashboard permissions and schedule automated PDF report generation, ensuring dashboards load consistently without permissions-related errors.
Monitor real-time ingestion rates and sourcetype volume, alerting on sudden data drops, silence gaps, or duplicate event streams across deployed inputs.
Assist security analysts with basic dashboard troubleshooting, updating broken filters, correcting simple SPL/KQL syntax errors, and validating input dropdown tokens.

Required Qualifications

Minimum experience based on education level: 12 years with HS degree, 10 years with AS/AA, 8 years with BS/BA, or 6 years with MS/MA.
DoW TS/SCI clearance.
DoD 8570 IAT II Certification.
Must be DoD 8140 compliant under Work Role Code 451 – Systems Administrator Intermediate (Intermediate level or higher).

Technologies

Splunk Enterprise, Splunk ES, Microsoft Sentinel
Red Hat Enterprise Linux (RHEL)
Splunk Universal/Heavy Forwarders, Sentinel Azure Monitor, syslog daemons
hot/warm/cold storage tiering, STIG, SSL/TLS
Splunk technology add-on (TA), SPL, KQL

Compensation and Benefits

Target salary range: USD 66,000 - 106,000 per year.
Medical, dental, vision, life, health savings account
Short/long term disability, EAP, parental leave
401(k), paid time off (PTO) for vacation, and company paid holidays

Application window: estimated 30 days from the job posting date. During the review process, applicants may be required to participate in an on-camera interview and complete an identity verification step. Use of artificial intelligence tools during Peraton interviews is strictly prohibited unless the candidate has prior written authorization, and all interview responses must be the candidate’s own. Peraton is an Equal Opportunity Employer, including disability and protected veterans.

View full job page →

Get Splunk Admin Data Jobs alerts

New Splunk Admin Data Jobs, daily.