Splunk Administrator

Apavo is at the forefront of cybersecurity, providing services to military, defense, and critical infrastructure industries. Joining the Apavo team means becoming part of a company rooted in the principles of quality, communication, and work‑life balance while fostering a growth mindset among all team members.

Splunk Administrator

Northern Virginia

Cyber Security Services

To be successful in this position you need to be collaborative, a self‑starter, and able to lead a team. You will interface with government and senior staff, articulate technical intricacies understandably, and contribute to the RMF program by integrating security controls seamlessly into system designs.

The Splunk Administrator supports the organization's Splunk infrastructure, ensuring stability, performance, and security compliance. You will design, implement, and maintain the Splunk environment, proactively identify and resolve issues, onboard new data sources, and create insightful dashboards and reports.

• Provide expertise for Splunk implementations and recommend changes to deployments.
• Support Indexer Clustering, Search Head Clustering, and Forwarders.
• Monitor, troubleshoot, and analyze overall health of the Splunk infrastructure, including indexing volume, search volume, user activity, and custom apps.
• Perform root‑cause analysis on issues and implement tactical and strategic solutions.
• Develop, manage, and maintain documentation supporting Splunk architecture and operational processes.
• Implement data onboarding techniques such as syslog, DB Connect, Universal Forwarder, HTTP Event Collector, and custom scripting.
• Maintain working knowledge of Linux, covering patching, SSL toolsets, capacity planning, routing protocols, and firewall rules.
• Design dashboards and provide user analytics for systems performance, security, and environmental health.
• Manage Splunk Data Models, including implementation, tuning, and data normalization.
• Ensure compliance with DISA STIG checklists for NIPRNet and SIPRNet environments.
• Create report dashboard designs and automated email notifications for Leadership & Executives, Cybersecurity Staff, and System Administrators.
• Translate user, client, and stakeholder needs into technical requirements.
• Support day‑to‑day technical communication systems and incident tickets.

• 5+ years of experience in cybersecurity, information assurance, or computer science.
• Minimum 5 years of experience with Splunk.
• DoD Top Secret Clearance with SCI/SAP eligibility.
• Bachelor’s degree in cybersecurity, information assurance, computer science, or equivalent experience.
• DoD 8570.01‑M IAT Level II certification.
• Experience with Linux operating systems.
• Strong customer service and communication skills; ability to present ideas clearly to leadership.
• Ability to work under time constraints and adapt to changing requirements.
• Capability to maintain and upgrade certifications.
• Rapid assimilation of new information and self‑study motivation.
• Current industry knowledge and excellent documentation skills.
• Experience with Splunk Admin/Architect certifications is preferred.
• Understanding of Indexer Clustering, Search Head Clustering, KV store, and CIM data normalization.
• Experience with Splunk Enterprise Security and Cribl Stream deployments.
• Expert‑level onboarding of complex data sources via multiple ingestion methods.

Associate or Bachelor’s degree in cybersecurity, information assurance, computer science, or related discipline.

• DoD 8570.01‑M IAT Level II
• Linux Operating System knowledge

DoD Top Secret Clearance with SCI/SAP eligibility is required.

This position is typical office or administrative work with no exposure to adverse environmental conditions. It requires sedentary work, defined as sitting most of the time with occasional lifting of up to 10 pounds.

Apavo Corporation provides equal employment opportunities to all applicants and employees and strictly prohibits any type of harassment or discrimination in regards to race, religion, age, color, sex, disability status, national origin, genetics, sexual orientation, protected veteran status, gender expression, gender identity, or any other characteristic protected under federal, state, and/or local laws.

Consistent with the Americans with Disabilities Act (ADA), it is the policy of Apavo Corporation to provide reasonable accommodation when requested by a qualified applicant or employee with a disability, unless such accommodation would cause an undue hardship. For accommodation requests, contact Apavo Human Resources at  or 571‑407‑0069.

At‑will, meaning either you or the Company can terminate the employment relationship at any time, for any reason, with or without cause or notice. This employment is not guaranteed for any length of time.