Splunk Engineer - Consultant Certified / TSSCI Full Scope Poly (R-00051)

As a Splunk Engineer at True Zero Technologies, your main responsibilities will include maintaining various clients' Splunk instances with a focus on data onboarding, content development, and reporting. You will also be involved in designing innovative solutions, administering enterprise Splunk implementations, and developing custom Splunk content like reports and dashboards. Your technical skills will be crucial in ensuring high-quality outcomes for our federal customers.

To qualify for the Splunk Engineer position at True Zero Technologies, you must possess the Splunk Core Consultant Certification and ideally have experience with federal government work. A strong background in Splunk engineering and administration is essential, along with technical expertise in configuring Splunk server roles and maintaining enterprise implementations. Familiarity with Linux and Windows environments will also be key to your success in this role.

True Zero Technologies offers a wide range of benefits to its Splunk Engineers, including competitive salaries, comprehensive medical coverage fully paid by the company, 3 weeks of paid time off, 11 paid holidays annually, and a robust 401k program with a generous company match. You’ll also receive reimbursement for cell phone and home internet expenses and have access to training and certification investment opportunities to enhance your skills.

Absolutely! At True Zero Technologies, we believe in the power of teamwork. Splunk Engineers are encouraged to engage with one another through internal Slack channels and knowledge workshops, facilitating open communication and collaboration. Our goal is to build a strong community of professionals who can share insights, troubleshoot together, and grow collectively in their expertise.

Splunk Engineers at True Zero Technologies enjoy robust growth opportunities, including access to a rich knowledge base and participation in training sessions and technical workshops. We invest in your professional development to ensure you stay at the forefront of industry advancements. Our environment promotes both learning and the sharing of best practices among colleagues, making it a perfect place for career advancement.

When answering this question, focus on specific projects where you've designed or maintained Splunk installations. Detail the roles you configured, such as search heads and indexers, and your approach to managing distributed environments. Highlight any challenges you faced and how you overcame them to ensure efficient data processing.

In your response, outline the steps you've taken in previous roles for data onboarding tasks. Discuss your experience with developing custom parsing rules and the implementation of Technology Add-Ons (TAs) according to Splunk's Common Information Model (CIM). Mention any tools or techniques that have helped you streamline this process.

It’s important to showcase your technical knowledge here. Discuss any relevant experience you've had with setting up and managing Indexer Clustering or Search Head Clustering in your previous roles. Be prepared to explain the benefits and challenges of using clustering in Splunk, along with your specific contributions to these configurations.

For this question, emphasize your communication skills and experiences. Describe your strategies for managing client expectations and how you keep clients informed throughout the project lifecycle. Providing specific examples of successful interactions with clients can emphasize your ability to collaborate effectively.

In your response, vary the technical depth based on your audience. Choose a specific incident, explain the problem, the steps you took to analyze and resolve it, and the outcome. This demonstrates your problem-solving capabilities and your technical proficiency with Splunk.

Discuss the key practices you follow to maintain a healthy Splunk environment, such as regular monitoring of system performance, updating configurations, and managing data retention policies. Emphasize the importance of documentation and adherence to Splunk’s guidelines and procedures for optimal operations.

Explain your approach to continuous learning in the field of Splunk. Mention any resources you use such as attending webinars, participating in user community forums, or following relevant blogs and publications that focus on new features and best practices related to Splunk.

Highlight your relevant experiences with both operating systems, specifically talking about configurations you've handled, such as file permission settings, storage subsystems, and overall system administration tasks that pertain to Apache, SELinux, etc. This demonstrates your versatility and technical fluency in different environments.

When responding, describe your process for creating custom content, mentioning tools or methodologies you utilize to ensure it's properly aligned with client needs and integrated into Splunk. Discuss any experience you have with crafting reports, dashboards, and alerts and the importance of user feedback in the development process.

Focus on True Zero's values and culture in your answer. Discuss the unique aspects of working at a veteran-owned company that prioritizes people and technology as well as your alignment with their goal of delivering excellent services. Mention how the community aspect and opportunities for professional growth excite you about this position.