> Markdown version of [/jobs/ext/1949755-sre-cyber-tools-splunk-admin](https://www.wearedevelopers.com/jobs/ext/1949755-sre-cyber-tools-splunk-admin). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# SRE Cyber Tools - Splunk Admin.

- **Company:** Leidos, Inc.
- **Location:** Norfolk, VA, United States
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** User Authentication, Bash Shell, Cloud Computing, Configuration Management, Cyber Security, Python (Programming Language), Parsing, Red Hat Enterprise Linux, Runbook, Security Information and Event Management, Syslog, Scripting, Transport Layer Security, HybridCloud, Indexer, SC Clearance, Hardware Infrastructure, Cloud Integration, Restful APIs, Cyber Warfare, Splunk, Network Server
- **Published:** August 6, 2026
- **Apply:** https://us.experteer.com/career/view-jobs/sre-cyber-tools-splunk-admin-norfolk-va-usa-58813506

## About the Role

23541, objects * Assist with patching, STIG compliance, and system hardening; support upgrades and modernization * Develop and maintain automation using scripting and configuration-management tools; contribute to CI/CD pipelines * Participate in incident response, root cause analysis, and post-incident reviews * Maintain architecture diagrams, runbooks, SOPs, and coordinate with cybersecurity, network, and server teams * Participate in after-hours support and on-call rotation Tasks * BS degree and 5-10 years of relevant experience or MS with 4-8 years * U.S. Citizen with active Secret clearance * DoD 8570.01 IAT Level II certification * 3+ years administering Splunk Enterprise v9 in hybrid/cloud/on-prem environments * Strong knowledge of Splunk ingestion, indexing, parsing, forwarding, and retention * RHEL 8/9 administration experience * Proficiency in scripting (Python, Bash, etc.) * Experience with cybersecurity monitoring and SIEM operations * TCP/UDP networking, SSL, Syslog, REST a
aav_ and authentication integrations * Vendor certifications (e.g., Splunk Enterprise Admin, Splunk Cloud Admin, SAFe) * Excellent communication, analytical, and documentation skills * Ability to work on-site at Norfolk Naval Station and manage competing priorities Key requirements *

## Description

Experteer Overview As a Leidos SRE Splunk Enterprise Administrator, you will support mission-critical cybersecurity operations for the Navy's SMIT program. You'll maintain and optimize distributed Splunk environments across hybrid cloud and on-premises setups, focusing on resilience, performance, and secure operations. You will collaborate with cross-functional teams to automate testing and validation of SLIs/SLOs, ensuring reliable services at scale. This role offers meaningful impact by strengthening cyber defense and enterprise network stability. Compensation / Benefits * Administer and operate distributed Splunk Enterprise environments (Search Heads, Indexers, Forwarders, Deployment Servers) across hybrid and on-premises infrastructure * Monitor health, ingestion, indexing performance, and retention; troubleshoot onboarding, parsing, and data issues * Support Splunk Cloud integrations and hybrid operational activities * Maintain and optimize Splunk apps, dashboards, alerts, and knowledge objects * Assist with patching, STIG compliance, and system hardening; support upgrades and modernization * Develop and maintain automation using scripting and configuration-management tools; contribute to CI/CD pipelines * Participate in incident response, root cause analysis, and post-incident reviews * Maintain architecture diagrams, runbooks, SOPs, and coordinate with cybersecurity, network, and server teams * Participate in after-hours support and on-call rotation Tasks * BS degree and 5-10 years of relevant experience or MS with 4-8 years * U.S. Citizen with active Secret clearance * DoD 8570.01 IAT Level II certification * 3+ years administering Splunk Enterprise v9 in hybrid/cloud/on-prem environments * Strong knowledge of Splunk ingestion, indexing, parsing, forwarding, and retention * RHEL 8/9 administration experience * Proficiency in scripting (Python, Bash, etc.) * Experience with cybersecurity monitoring and SIEM operations * TCP/UDP networking, SSL, Syslog, REST APIs, and authentication integrations * Vendor certifications (e.g., Splunk Enterprise Admin, Splunk Cloud Admin, SAFe) * Excellent communication, analytical, and documentation skills * Ability to work on-site at Norfolk Naval Station and manage competing priorities Key requirements *


## Related Videos

- [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json)
- [SRE Methods In an Agency Environment](https://www.wearedevelopers.com/videos/348-sre-methods-in-an-agency-environment)
- [Building a Compiler with C#](https://www.wearedevelopers.com/videos/116-building-a-compiler-with-c)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated)