Position Announcement 23-05

National Information Tech Operations and Applications Development

SPLUNK ADMINISTRATOR

Office of the Federal Public Defender

Western District of Texas (San Antonio)

The Federal Public Defender, Western District of Texas is accepting applications for the position of Splunk Administrator, National Information Technology Operations and Applications Development (NITOAD), located in San Antonio, Texas. The NITOAD branch supports the federal defender program’s staffed offices in 204 locations throughout the continental United States, Alaska, Hawaii, Puerto Rico, the Virgin Islands, and Guam. The federal defender program operates under authority of the Criminal Justice Act, 18 U.S.C. § 3006A, to provide defense services in federal criminal cases and related matters by appointment from the court to individuals unable to afford counsel.

Job Requirements: To qualify for the position of Splunk Administrator, candidates must have (1) a bachelor’s degree from an accredited college or university in computer science, information science, or a related field; (2) 4+ years of Data Management & Analytics experience; and (3) at least 1 year of relevant experience designing, configuring, and maintaining a SIEM infrastructure hosted on-site. The candidate must also possess strong analytical skills to solve complex technical problems, and the ability to identify areas of improvement. Be detail-oriented and motivated to find opportunities for continual development; be available to participate in installation and maintenance activities during nights and weekends; and be available to work on-site in San Antonio, Texas. Applicants must have demonstrated proficiency in:

• identifying data correlations and patterns, creating visualizations, and custom reports;
• working with customers to ingest data from multiple sources;
• preparing configurations, data enrichment, and optimizations to a SIEM;
• using scripting languages to automate tasks and manipulate data;
• providing excellent customer service through both oral and written communication;
• working with peers to create effective team collaboration.

The ability to lift 50 pounds and occasional travel, including overnight travel, is required. The selected candidate must successfully complete a ten-year background investigation with periodic updates every five years thereafter. Employment will be considered provisional pending the successful completion of the initial ten-year background investigation. Continued employment will depend upon the successful completion and favorable determinations based on investigation results thereafter. Applicants must be US citizens or be authorized to be employed by the federal government. Employment also requires a person be fully vaccinated for COVID-19 and provide proof of such prior to entrance on duty.

Duties: The Splunk Administrator will design, configure, deploy, and maintain Splunk and other log management systems. Regular responsibilities include providing technical coaching and mentoring to staff, identifying opportunities to increase Splunk adoption, identifying new use cases, and maintaining efficient log processing solutions. Identifying problem areas and finding solutions to collaborate with SMEs of other technology domains. Analyzing data sources, ensuring the logs processed are CIM compliant. Manipulating searches and correlations to increase processing efficiency. Creating custom searches and dashboards for non-technical customers. Performing data analysis to identify correlations, create data models, and look up tables and transforms. Maintaining the Splunk environment patches and upgrading to the recommended version. Maintaining Splunk add-ons and collaborating with the Security Team developing custom log searches and ad-hoc alerts. Maintaining a good working relationship with peers and customers. The full position qualifications statement with position description is available upon request.

Selection Criteria: The successful applicant will have experience administering Splunk in an enterprise environment, authoring technical documentation such as installation, deployment, and updating procedures, designing, planning, and implementing complex Splunk architectures. The applicant must possess hands-on experience maintaining a Splunk environment hosted on-prem on Hyper-V servers; proficiency with Regular Expressions, Splunk Visualizations, SPL searches, Dashboards and Drilldowns, custom Splunk add-ons for new and unique sources and source types; solid skills to build scripted tasks with Splunk to automate repeatable processes; and administering universal forwarders, Syslog-NG, heavy forwarders, search clusters, and Sysmon log sources. Splunk training for power users is preferred. Splunk certifications are strongly preferred. Knowledge in the administration and maintenance of data sources in a Linux/Windows mixed environment is a plus. Proficient with PowerShell and Python 3 is strongly preferred. Experience with a public defender, law offices or court functions, policies and procedures are preferred.

Salary and Benefits. The starting salary will be commensurate with the experience and qualifications of the applicant within a range of $61,226 (JSP-9, Step 1) to $95,339 (JSP-13, Step 1) per annum. The position is in the excepted service and does not have the tenure rights of the competitive Civil Service. The position does offer federal government employment benefits, including health and life insurance programs, retirement, and the Thrift Savings Plan. Salary is payable only by Electronic Funds Transfer (direct deposit).

How to Apply. Qualified persons may apply by submitting a letter of interest (mentioning announcement number 23-05), a résumé, and a list of three professional references to: Maureen Scott Franco, Federal Public Defender, Western District of Texas, 7550 IH-10 West, Suite 200, San Antonio, Texas 78229, or you may submit the required documents in a single PDF document named with applicant’s “last name, first name-Announcement 23-05 NITOAD Splunk Administrator” by submitting through Indeed.com or LinkedIn.com. Emails sent directly to the Defender will not be considered. For applicants with disabilities, this organization provides reasonable accommodations, which are determined on a case-by-case basis. To request a reasonable accommodation for any part of the application or interview process, contact personnel administrator Victoria B. Longoria at (210) 981-2081. More than one position may be filled from this announcement. Position announced November 1, 2022, subject to the availability of funds; open until filled.

The Federal Public Defender is an equal-opportunity employer.

Job Type: Full-time

Pay: $61,226.00 - $95,339.00 per year

Benefits:

• 401(k)
• 401(k) matching
• Dental insurance
• Employee assistance program
• Flexible spending account
• Health insurance
• Health savings account
• Life insurance
• Parental leave
• Retirement plan
• Vision insurance

Schedule:

• 8 hour shift
• Day shift
• Monday to Friday
• On call

Education:

• High school or equivalent (Required)

Work Location: One location

dutch-tavern.com is the go-to platform for job seekers looking for the best job postings from around the web. With a focus on quality, the platform guarantees that all job postings are from reliable sources and are up-to-date. It also offers a variety of tools to help users find the perfect job for them, such as searching by location and filtering by industry. Furthermore, dutch-tavern.com provides helpful resources like resume tips and career advice to give job seekers an edge in their search. With its commitment to quality and user-friendliness, dutch-tavern.com is the ideal place to find your next job.