Splunk Software Engineer-TS/SCI with Poly at CACI in Columbia, MD, US

Job description

• The Splunk Software Engineer (SWE) is a Linux‑focused, highly versatile engineering generalist with strong troubleshooting, automation, and cross‑domain security experience who serves on a cross‑functional team of systems engineers. They also act as the team’s subject matter expert for Splunk applications and analytics.

Responsibilities

• Serve as the team’s Linux expert, performing OS installation, configuration, user management, networking, and system maintenance.
• Manage hardware using tools like iDRAC, including BIOS updates, firmware upgrades, RAID configuration, and basic hardware troubleshooting.
• Troubleshoot complex issues across operating systems, hardware, networks, data flows, and applications.
• Build and manipulate files using core UNIX utilities, including creating tar archives, splitting files, and preparing data for constrained transfer paths.
• Support automation workflows using Salt, and adapt quickly from related tools such as Ansible, Puppet, or Terraform.
• Build, deploy, or maintain Cross Domain Solutions (CDS) or similar high‑assurance boundary security technologies.
• Act as the team’s subject matter expert for Splunk applications, dashboards, data routing, and analytics.

Requirements

• Strong Linux system administration experience, including OS installation, configuration, user and permission management, networking fundamentals, and command‑line operations.
• Experience managing hardware using tools like iDRAC (or similar), including BIOS and firmware updates, RAID configuration, and basic hardware troubleshooting.
• Demonstrated ability to troubleshoot complex issues across operating systems, hardware, networks, applications, and data flows.
• Proficiency with core UNIX command‑line utilities for file manipulation, packaging, and transfer (e.g., tar, split, checksum tools).
• Experience using Salt for configuration management or build automation, or strong adjacent experience with Ansible, Puppet, or Terraform.
• Experience building, deploying, or maintaining Cross Domain Solutions (CDS) such or similar high‑assurance boundary security technologies.
• Experience supporting or developing Splunk applications, dashboards, data routing, and analytics as the team’s Splunk subject matter expert.
• Must have experience in at least 4 of the below technologies:
• •JavaScript
• •Regular Expressions (RegEx)
• •REST services
• •Python frameworks
• •Elasticsearch or Splunk
• •CI/CD processes
• •Monitoring tools (such as Nagios or Elastic Beats)
• •Apache NiFi
• •React or Angular
• •DevOps tools (Ansible, Salt, Docker)
• •Cribl
• All experience and education must be in a technical field directly related to the labor category and all diplomas, GED certificates, and degrees will be from accredited institutions.
• 7 years minimum experience and a High School Diploma/GED
• 5 years minimum experience and an Associate's Degree
• 3 years minimum experience and a Bachelor's Degree
• 1 year minimum experience and a Master's Degree
• Splunk certification in Splunk Accredited Core Implementation
• Advanced Linux expertise, including system recovery techniques, deep command‑line proficiency, including expertise with ssh/tunneling, authentication/certificates, and tools such as sed, awk, grep, rsync, and dd.
• Experience performing hardware lifecycle operations such as disk replacement, RAID adjustments, firmware baselining, and remote KVM troubleshooting.
• Hands‑on experience optimizing or customizing Salt states, modules, or orchestration workflows.
• Experience with adjacent automation frameworks such as Ansible, Puppet, or Terraform in mixed‑tool environments.
• Prior experience designing, modifying, or validating configurations and filtering rules for CDS or other high‑assurance boundary security technologies.
• Experience integrating Splunk into constrained, air‑gapped, or cross‑domain environments.
• Familiarity with DevOps workflows including CI/CD pipelines, version control best practices, and automated build processes.
• Experience supporting distributed systems and diagnosing issues across complex data flows or multi‑system interactions.
• -

Skills

Required

• Linux system administration
• Hardware management (iDRAC)
• Troubleshooting
• UNIX command-line utilities
• Salt
• Cross Domain Solutions (CDS)
• Splunk
• JavaScript
• Regular Expressions (RegEx)
• REST services
• Python frameworks
• Elasticsearch or Splunk

Preferred

• Advanced Linux expertise
• Hardware lifecycle operations
• Salt optimization
• Ansible, Puppet, Terraform
• CDS configuration
• DevOps workflows
• Distributed systems support

Benefits

• There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.
• $94,400 - $198,200