Senior Splunk Engineer w/ Active Secret Clearance

Strategic Business Systems, Inc. (SBS) is seeking a talented Splunk Engineer to join our growing team. This role will support the design, implementation, administration, and optimization of Splunk environments for government and enterprise customers., The ideal candidate will have hands-on experience with Splunk Enterprise, Splunk Cloud, data onboarding, dashboard development, alerting, reporting, and supporting security, IT operations, and mission-focused use cases., * Design, deploy, configure, and maintain Splunk Enterprise and/or Splunk Cloud environments.

• Support data onboarding from a variety of sources, including servers, applications, network devices, cloud services, and security tools.
• Build and maintain dashboards, reports, alerts, and visualizations to support operational and security requirements.
• Develop and optimize SPL queries for performance, accuracy, and usability.
• Manage Splunk forwarders, indexers, search heads, apps, add-ons, and knowledge objects.
• Troubleshoot data ingestion, parsing, indexing, search performance, and platform availability issues.
• Collaborate with cybersecurity, infrastructure, DevOps, and customer teams to translate requirements into Splunk solutions.
• Support monitoring, logging, SIEM, compliance, and operational analytics use cases.
• Create and maintain technical documentation, standard operating procedures, and user guidance.
• Contribute to automation, platform improvements, and Splunk best practices.

• U.S. Citizenship.
• Hands-on experience administering or engineering Splunk Enterprise and/or Splunk Cloud environments.
• Experience with Splunk data onboarding, index management, forwarder configuration, and troubleshooting.
• Strong working knowledge of SPL, dashboards, alerts, reports, and field extractions.
• Familiarity with Linux and/or Windows system administration.
• Understanding of log management, monitoring, cybersecurity, or IT operations concepts.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent communication and collaboration abilities.

Preferred Qualifications

• Experience supporting federal, defense, or regulated customers.
• Experience with Splunk Enterprise Security, ITSI, or SOAR.
• Experience integrating Splunk with cloud platforms such as AWS, Azure, or Google Cloud.
• Familiarity with cybersecurity frameworks, SIEM operations, incident response, or compliance reporting.
• Scripting or automation experience using Python, Bash, PowerShell, or similar tools.
• Experience with configuration management, CI/CD, or infrastructure automation tools.
• Splunk certifications such as Splunk Core Certified Power User, Splunk Enterprise Certified Admin, Splunk Enterprise Certified Architect, or Splunk Enterprise Security Certified Admin.

Strategic Business Systems, Inc. (SBS) is a national Information Technology services company headquartered in the Washington, D.C. metropolitan area. SBS provides comprehensive IT infrastructure design, integration, and operational services. Our expertise spans the full spectrum of infrastructure technologies, including networking, servers, data storage, disaster recovery, cybersecurity, cloud, and internet technologies.