Splunk Administrator w/ Linux

Resource Management Concepts, Inc. (RMC) provides high-quality, professional services to government and commercial sectors. Our mission is to deliver exceptional management and technology solutions supporting the protection and preservation of the people and environment of the United States of America.

RMC is hiring for a Splunk Systems Administrator with a primary focus on Security Information and Event Management (SIEM) and Linux administration support for our customers in Indian Head, MD (Main Side). 

Responsibilities:

• Administer, configure, and maintain Splunk Enterprise on Linux-based systems 
• Install and configure Splunk forwarders, indexers, and search heads 
• Design, implement, and manage Splunk infrastructure on Linux servers 
• Troubleshoot and optimize Splunk performance on Linux environments, ensuring smooth and efficient operations 
• Configure and manage Splunk apps, add-ons, and integrations with third-party data sources 
• Monitor Splunk health, conduct regular backups, and implement disaster recovery procedures 
• Collaborate with security and operations teams to define logging and monitoring strategies 
• Ensure Splunk infrastructure is secure by implementing access controls, encryption, and security best practices 
• Perform regular updates, patches, and upgrades for Splunk and Linux systems 
• Develop and maintain automation scripts for monitoring, backups, and system configurations 
• Provide support for incident response, reporting, and debugging within Splunk environments
• Expertise in Linux (Red Hat, CentOS, etc.), including system administration, performance tuning, and troubleshooting
• Experience with configuring and managing Splunk distributed environments (indexers, search heads, forwarders)
• Experience with monitoring and troubleshooting Splunk performance on Linux
• Familiarity with Splunk apps, add-ons, and custom configurations
• Knowledge of Linux shell scripting (Bash, Python, etc.) for automation and system management
• Proficiency with Splunk Search Processing Language (SPL)
• Solid understanding of security best practices for Splunk and Linux systems
• Assist team with performing aspects of incident response including responding to detection notices, lead investigation to include coordinating with other IT admins if needed, reporting update tickets and documenting investigation information, reporting to ISSM and supporting investigation closure in accordance to site process

• Security Clearance: An Interim DoD Secret clearance is required to start. A Top Secret clearance will be required for this position. Applicant selected may be subject to a security investigation and must meet eligibility requirements for access to classified information.
• DoD 8570.01M IAT Level III certified with Continuing Education (CE) (CompTIA CASP+ CE, CISSP, or equivalent)
• Splunk certifications (Splunk Certified Admin, Splunk Certified Power User, etc.)  
• Linux certifications (RHCSA, LPIC-2, etc)
• Minimum of 5-10 years of experience supporting system administration for DoD or Federal Programs

At RMC, we're committed to your career growth! RMC differentiates itself from other firms through its investment in our employees. We invest our resources to train, certify, educate, and build our employees.

RMC can offer you a great place to work with a small company feel and give you the experience, tuition assistance, and certifications that will take your career to the next level. This also includes a competitive paid vacation package with 11 paid federal holidays. Additionally, we also offer high-quality, low-deductible healthcare plans, pet insurance, and a competitive 401K package.

Salary at RMC is determined by various factors, including but not limited to location, a candidate's specific combination of education, knowledge, skills, competencies, and experience, as well as contract-specific requirements. The current salary range for this position will be $100,000 to $140,000 (annually).

#LI-MB1