OTHER

FEED

UNKNOWN

Support includes assessing independent Local Area Networks (LANs); executing LAN collapse procedures; procuring authorized LAN equipment for network expansion or upgrades; conducting on-site surveys for new LAN locations; determining and documenting customer and technical requirements; transporting, configuring, and installing new equipment; and implementing all required services to make new locations fully operational networks. AMERICAN SYSTEMS provides for the welfare of its employees and their dependents through a comprehensive benefits program by offering healthcare benefits, paid leave, retirement plans, insurance programs, and education and training assistance.

YEAR

Overview:
AMERICAN SYSTEMS supports the mission of The US Space Force. Support includes assessing independent Local Area Networks (LANs); executing LAN collapse procedures; procuring authorized LAN equipment for network expansion or upgrades; conducting on-site surveys for new LAN locations; determining and documenting customer and technical requirements; transporting, configuring, and installing new equipment; and implementing all required services to make new locations fully operational networks.

Responsibilities:
AMERICAN SYSTEMS is seeking a professional with 8 – 10 years of experience and TS/SCI Clearance to be our next Senior Splunk Engineer at Malmstrom AFB, Montana.  Platform Engineering & Administration<ul><li>Install, configure, and maintain Splunk Enterprise and Splunk ES in classified, air-gapped, or cross-domain environments.</li><li>Manage distributed architectures (indexers, search heads, cluster masters, deployment servers, forwarders) with a focus on reliability, performance, and security.</li><li>Perform upgrades, patching, app deployment, performance tuning, and capacity planning.</li><li>Implement and maintain backup/restore, DR procedures, and system hardening in accordance with DoD/IC and organizational policies.</li></ul>Data Onboarding & Normalization<ul><li>Onboard logs from servers, network devices, security appliances, applications, and specialized classified systems.</li><li>Develop and manage inputs, props, transforms, field extractions, and parsing to ensure high-quality, normalized data (CIM-compliant where applicable).</li><li>Work with system owners and engineers to define logging requirements that support auditing, incident reconstruction, and compliance.</li><li>Integrate Splunk with existing security tooling and infrastructure (e.g., host-based security, IDS/IPS, vulnerability scanners, identity systems).</li></ul>Detection, Dashboards & Reporting<ul><li>Develop searches, correlation logic, alerts (where appropriate), and dashboards to surface security-relevant activity, system health, and compliance status.</li><li>Create role-specific dashboards for cybersecurity staff, ISSOs/ISSMs, system administrators, and leadership.</li><li>Support audit and inspection preparation (e.g., RMF, JSIG, NIST 800-53, CNSSI 1253) by building reports and evidence queries from Splunk.</li><li>Implement and maintain data models, lookups, and other knowledge objects to support efficient analysis and reporting.</li></ul>Security & Compliance AlignmentEnsure Splunk configurations and data flows comply with classified environment requirements, including handling caveats, data segregation, and need-to-know.<ul><li>Implement strict RBAC, data access controls, and logging of administrative actions.</li><li>Support RMF and related processes by providing visibility into control effectiveness (e.g., AU-2, AU-6, AU-12, SI-4).</li><li>Assist with continuous monitoring activities using Splunk as a key evidence and monitoring platform.</li></ul>Collaboration & Technical Leadership (Non-SOC)<ul><li>Collaborate with cybersecurity engineers, ISSOs/ISSMs, system administrators, and network engineers to embed Splunk into system designs and modernization efforts.</li><li>Provide expert guidance on how to leverage Splunk for troubleshooting, audit support, and security visibility.</li><li>Mentor junior engineers and administrators on Splunk best practices, SPL queries, and platform usage.</li><li>Contribute to Splunk standards, runbooks, and engineering documentation tailored for the classified environment.</li></ul> 

Qualifications:
Required Qualifications<ul><li>Active TS/SCI with CI Poly clearance (or eligibility) as required by the program.</li><li>Bachelor’s degree in computer science, Information Security, Information Systems, or equivalent experience.</li><li>6 - 8 years of experience with approximately 4-8 years of IT/cybersecurity experience, with at least 3+ years of hands-on SIEM</li><li>Demonstrated experience supporting Splunk in highly regulated or secure environments (DoD, IC, federal, defense contractor, or similar).</li><li>Proficiency with SPL, including complex searches, statistical commands, sub searches, lookups, and dashboard creation.</li></ul>Experience onboarding and normalizing data from:<ul><li>Windows and Linux systems</li><li>Network infrastructure (routers, switches, firewalls, proxies)</li><li>Security tools (AV/EDR, IDS/IPS, vulnerability scanners, identity systems)</li><li>Strong understanding of information security principles and controls (logging, monitoring, auditing, least privilege, configuration management).</li><li>Familiarity with NIST 800-53, RMF, JSIG, or similar frameworks applicable to classified systems.</li></ul> Preferred Qualifications<ul><li>Splunk certifications (e.g., Splunk Core Certified Power User, Splunk Core Certified Admin, Splunk Enterprise Security Certified Admin).</li><li>Experience operating Splunk in air-gapped, disconnected, or cross-domain (CDS) architectures.</li><li>Scripting skills (Python, PowerShell, Bash) for automation, integrations, and data manipulation.</li><li>Experience with configuration management and infrastructure-as-code (Ansible, Puppet, Chef, Terraform, or similar).</li><li>DoD 8570/8140-compliant certification (e.g., Security+, CySA+, CASP+, CISSP, GSLC, GSEC) as required for IAT/IASAE roles.</li><li>Background in one or more of: systems administration, network engineering, or cyber engineering in classified environments.</li></ul> Skills & Competencies<ul><li>Ability to work effectively in a classified, process-driven environment with strong attention to detail and documentation.</li><li>Strong analytical and problem-solving skills; able to independently diagnose Splunk and data pipeline issues.</li><li>Clear and concise communication skills for collaboration with technical teams and security leadership.</li><li>Self-directed and able to prioritize tasks to support mission and compliance deadlines.</li></ul> 

Wage Transparency Statement:
AMERICAN SYSTEMS is committed to pay transparency for our applicants and employee-owners. The salary range for this position is USD $175,000.00/Yr. - USD $185,000/Yr. Actual compensation will be determined based on several factors permitted by law. AMERICAN SYSTEMS provides for the welfare of its employees and their dependents through a comprehensive benefits program by offering healthcare benefits, paid leave, retirement plans, insurance programs, and education and training assistance.

EEO Statement:
EEO Race/Sex/Disability Status/Veteran Status

Founded in 1975, AMERICAN SYSTEMS is one of the largest employee-owned companies in the United States, with approximately 1,400 employees nationwide. Based in the Washington, DC, suburb of Chantilly, VA, the company provides systems engineering, technical and managed services to government and private sector customers. AMERICAN SYSTEMS was named “Contractor of the Year” at the Greater Washington Government Contractor Awards in October, 2007.

AMERICAN SYSTEMS

Senior SIEM Engineer

Access Control

Analysis Skills

Ansible

Audiovisual

Auditing

Automation

Bash Scripting

Best Practices

CIM (Common Information Model)

CISSP - Certified Information Systems Security Professional

Capacity and Performance Management

Chef (Configuration Management)

Communication Skills

CompTIA Security+

Computer Science

Computer Security

Configuration Management

Data Management

Data Modeling

Data Recovery

Detail Oriented

DoD Directive 8140

DoD Directive 8570

Documentation

Enterprise Protection

Environmental Compliance

Environmental Regulations

Establish Priorities

Federal Contracts

Firewalls

Forwarder

GSEC - GIAC Security Essentials Certification

GSLC - GIAC Security Leadership Certificate

Identify Issues

Information Assurance Workforce System Architect and Engineer (IASAE)

Information/Data Security (InfoSec)

Integrated Circuits (ICs)

Internet Security

Intrusion Detection Systems

Intrusion Prevention Systems

Leadership

Linux Operating System

Local Area Network (LAN)

Machine Tool

Mentoring

Microsoft Windows Operating System

Network Administration/Management

Network Architecture/Engineering

Network Configuration Management

Network Routers

Network Switching

Network System Hardware

Performance Tuning/Optimization

Problem Solving Skills

Puppet (Configuration Management)

Purchasing/Procurement

Python Programming/Scripting Language

Reporting Dashboards

Requirements Management

Scripting (Scripting Languages)

Security Auditing

Security Information and Event Management (SIEM)

Security Infrastructure

Sensitive Compartmented Information (SCI)

Software Patches

Splunk

System Integration (SI)

Systems Administration/Management

Systems Engineering

Team Player

Technical Leadership

Time Management

Top Secret Clearance

U.S. National Institute of Standards and Technology (NIST)

United States Department of Defense (DoD)

Vulnerability Scanners

Windows PowerShell

[AW]-iCims

Senior Engineering Jobs in Great Falls, MT

Senior Engineering Jobs in Great Falls, MT

Resume Resources

Get noticed by top employers!

Senior Engineering Jobs in Great Falls, MT

Senior SIEM Engineer AMERICAN SYSTEMS

Resume Resources