Splunk Engineer SME

This is a remote position.

About KITC

KITC, LLC is an SBA-certified 8(a) Small Disadvantaged Business delivering federal IT modernization, cloud architecture, cybersecurity, and digital transformation services to agencies including DHS, FBI, and NIH.

We support highly regulated federal environments governed by NIST, FedRAMP, FISMA, and Zero Trust initiatives. Our team delivers secure, scalable, and innovative technology solutions supporting mission-critical government operations.

Position Summary

KITC is seeking an experienced Splunk Engineer SME to support enterprise logging, security monitoring, observability, and cybersecurity operations within a federal government environment.

This role is responsible for designing, implementing, and optimizing Splunk solutions that provide operational visibility, security analytics, compliance reporting, and continuous monitoring across AWS and hybrid infrastructures. The ideal candidate will collaborate closely with cloud architects, cybersecurity teams, system administrators, developers, and government stakeholders to support cloud modernization initiatives and enterprise security objectives.

Key Responsibilities

• Design, deploy, and administer Splunk Enterprise and Splunk Cloud environments.
  
• Integrate Splunk with AWS services, including CloudTrail, CloudWatch, GuardDuty, Security Hub, AWS Config, EC2, Lambda, and S3.
  
• Develop SPL searches, dashboards, alerts, and operational reporting.
  
• Support security monitoring, incident response, and compliance initiatives.
  
• Develop automation using Python, PowerShell, Bash, AWS CLI, CloudFormation, and Terraform.
  
• Collaborate with cloud engineers, cybersecurity teams, developers, and government stakeholders.
  
• Maintain technical documentation and support mission-critical federal operations.
  

Requirements

• Bachelor's degree in IT, Computer Science, Cybersecurity, Engineering, or related field; OR 10+ years of equivalent experience.
  
• 8+ years of cloud technology experience.
  
• 4+ years of hands-on AWS experience.
  
• Experience administering Splunk Enterprise and/or Splunk Cloud.
  
• Experience supporting enterprise monitoring, logging, and security analytics.
  
• Experience with NIST, FISMA, and FedRAMP compliance.
  
• U.S. Citizenship required.
  
• Ability to support EST business hours.
  

Required Certifications

• Splunk Enterprise Certified Admin OR Splunk Cloud Certified Admin
  
• AND one of the following:
  
  • AWS Solutions Architect Professional
    
  • AWS DevOps Engineer Professional
    

Preferred Qualifications

• Active Public Trust Clearance.
  
• DOJ Public Trust Clearance.
  
• Splunk Enterprise Certified Architect.
  
• VMware Certified Professional (VCP).
  
• Terraform Associate.
  
• Azure or Google Cloud Platform experience.
  
• Docker and Kubernetes.
  
• DevSecOps and CI/CD experience.
  
• CISSP, CISM, CEH, Security+, or similar cybersecurity certifications.
  

Benefits