Not Applicable
Posted April 17, 2026
Job link
Thinking about this job
Responsibilities
Commitments
Responsibilities
- The candidate will be part of a team of Splunk Engineers maintaining various client's Splunk instances with a heavy emphasis on data on-boarding, content development, reporting, and visualizations.
- All candidates must possess prior Splunk engineering and administration experience, meet the necessary certification prerequisites, and work well in a team environment.
- True Zero encourages collaboration and growth through information sharing and knowledge workshops.
Commitments
U.S.
Citizenship is required as this is in support of a Federal Customer.
We’re actively searching for talented security and technology practitioners who are ready to experience the True Zero difference.
Not Met Priorities
What still needs stronger evidence
Requirements
- All candidates must possess prior Splunk engineering and administration experience, meet the necessary certification prerequisites, and work well in a team environment.
- Splunk Architect Certification
- Experience designing and implementing ground up distributed Splunk installations including all Splunk server roles (Search Head, Indexers, Heavy Forwarders and Universal Forwarders, etc.)
- Experience with advanced configuration of Splunk including Indexer Clustering and Search Head Clustering
- Experience maintaining and administering enterprise Splunk implementations
- Experience developing custom Splunk content including scheduled searches, reports, dashboards, etc
- Proficient at data on-boarding activities including custom parsing rules, custom Technology Add-On building according to Splunk's Common Information Model (CIM)
- Experience configuring indexes, index routing, retention policies, etc
- Experience working in linux and windows environments, ability to configure:
- Storage subsystems (I.e. partitioning, Volume Groups, Logical Volumes, etc.)
- SELinux
- Familiarity with different flavors of Linux distros (RedHat, CentOS, Ubuntu, etc.)
- File Permission Settings (linux/windows)
- Excellent written and oral skills, ability to work closely with multiple customers, manage expectations, and track engagement scope
- U.S.
- Citizenship is required as this is in support of a Federal Customer.
Preferred Skills
- Candidates with backgrounds supporting federal customers is a plus.
- Splunk Core Consultant Certification
- Splunk Enterprise Security Implementation Certification
- Splunk IT Service Intelligence certification
- Understanding of Syslog daemon configuration principles, ideally in Syslog-NG and RSyslog configurations
- Cloud experience (AWS, Azure, etc.)
- Development and API experience (Python, Perl, XML)
- SaltStack, Ansible, and other enterprise automation tool experience
- Hardware experience and storage experience (SAN, NAS, etc.)
- U.S.
- Citizenship is required as this is in support of a Federal Customer.
Education
- (Required) – All candidates must possess prior Splunk engineering and administration experience, meet the necessary certification prerequisites, and work well in a team environment.
- (Not required) – Splunk Architect Certification
- (Not required) – Splunk Core Consultant Certification
True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that said outcomes begin and end with our people, and that is what we have built, a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top tier services to our customers. In 2023, True Zero was recognized as a “Best Places to Work” in two categories ("Prosperous and Thriving" ($5MM – $50MM in gross revenue) and "Mid-Atlantic Region" (DC, DE, MD, NC, VA, WV)) and in 2022, was recognized as one of Inc. Magazine’s Top 5000 Fastest Growing Companies.
The candidate will be part of a team of Splunk Engineers maintaining various client's Splunk instances with a heavy emphasis on data on-boarding, content development, reporting, and visualizations. All candidates must possess prior Splunk engineering and administration experience, meet the necessary certification prerequisites, and work well in a team environment. Candidates with backgrounds supporting federal customers is a plus.
As a TZT consultant, the candidate will receive access to the full knowledge base which is driven by the True Zero community as well as the technical backing of the entire PS team. True Zero encourages collaboration and growth through information sharing and knowledge workshops. The candidate will also have access to our internal Slack channel to stay connected with the team as well as the necessary tools to train, demo, test and grow their professional skills.
Qualification Requirements
Splunk Architect Certification
Experience designing and implementing ground up distributed Splunk installations including all Splunk server roles (Search Head, Indexers, Heavy Forwarders and Universal Forwarders, etc.)
Experience with advanced configuration of Splunk including Indexer Clustering and Search Head Clustering
Experience maintaining and administering enterprise Splunk implementations
Experience developing custom Splunk content including scheduled searches, reports, dashboards, etc
Proficient at data on-boarding activities including custom parsing rules, custom Technology Add-On building according to Splunk's Common Information Model (CIM)
Experience configuring indexes, index routing, retention policies, etc
Experience working in linux and windows environments, ability to configure:
Storage subsystems (I.e. partitioning, Volume Groups, Logical Volumes, etc.)
SELinux
Familiarity with different flavors of Linux distros (RedHat, CentOS, Ubuntu, etc.)
File Permission Settings (linux/windows)
Excellent written and oral skills, ability to work closely with multiple customers, manage expectations, and track engagement scope
Preferred Qualifications
Splunk Core Consultant Certification
Splunk Enterprise Security Implementation Certification
Splunk IT Service Intelligence certification
Understanding of Syslog daemon configuration principles, ideally in Syslog-NG and RSyslog configurations
Cloud experience (AWS, Azure, etc.)
Development and API experience (Python, Perl, XML)
SaltStack, Ansible, and other enterprise automation tool experience
Hardware experience and storage experience (SAN, NAS, etc.)
U.S. Citizenship is required as this is in support of a Federal Customer.
We’re actively searching for talented security and technology practitioners who are ready to experience the True Zero difference. As a True Zero team member, you'll enjoy:
Competitive salary, paid twice per month
Best in class medical coverage
100% of medical premiums covered by True Zero
Company wide new business incentive programs
Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.)
3 weeks of PTO starting + 11 Paid Holidays Annually
401k Program with 100% company match on the first 4%
Monthly reimbursement of Cell Phone and Home Internet costs
Paternity/Maternity Leave
Investment in training and certifications to broaden and deepen your technical skills
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
The candidate will be part of a team of Splunk Engineers maintaining various client's Splunk instances with a heavy emphasis on data on-boarding, content development, reporting, and visualizations. All candidates must possess prior Splunk engineering and administration experience, meet the necessary certification prerequisites, and work well in a team environment. Candidates with backgrounds supporting federal customers is a plus.
As a TZT consultant, the candidate will receive access to the full knowledge base which is driven by the True Zero community as well as the technical backing of the entire PS team. True Zero encourages collaboration and growth through information sharing and knowledge workshops. The candidate will also have access to our internal Slack channel to stay connected with the team as well as the necessary tools to train, demo, test and grow their professional skills.
Qualification Requirements
Splunk Architect Certification
Experience designing and implementing ground up distributed Splunk installations including all Splunk server roles (Search Head, Indexers, Heavy Forwarders and Universal Forwarders, etc.)
Experience with advanced configuration of Splunk including Indexer Clustering and Search Head Clustering
Experience maintaining and administering enterprise Splunk implementations
Experience developing custom Splunk content including scheduled searches, reports, dashboards, etc
Proficient at data on-boarding activities including custom parsing rules, custom Technology Add-On building according to Splunk's Common Information Model (CIM)
Experience configuring indexes, index routing, retention policies, etc
Experience working in linux and windows environments, ability to configure:
Storage subsystems (I.e. partitioning, Volume Groups, Logical Volumes, etc.)
SELinux
Familiarity with different flavors of Linux distros (RedHat, CentOS, Ubuntu, etc.)
File Permission Settings (linux/windows)
Excellent written and oral skills, ability to work closely with multiple customers, manage expectations, and track engagement scope
Preferred Qualifications
Splunk Core Consultant Certification
Splunk Enterprise Security Implementation Certification
Splunk IT Service Intelligence certification
Understanding of Syslog daemon configuration principles, ideally in Syslog-NG and RSyslog configurations
Cloud experience (AWS, Azure, etc.)
Development and API experience (Python, Perl, XML)
SaltStack, Ansible, and other enterprise automation tool experience
Hardware experience and storage experience (SAN, NAS, etc.)
U.S. Citizenship is required as this is in support of a Federal Customer.
We’re actively searching for talented security and technology practitioners who are ready to experience the True Zero difference. As a True Zero team member, you'll enjoy:
Competitive salary, paid twice per month
Best in class medical coverage
100% of medical premiums covered by True Zero
Company wide new business incentive programs
Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.)
3 weeks of PTO starting + 11 Paid Holidays Annually
401k Program with 100% company match on the first 4%
Monthly reimbursement of Cell Phone and Home Internet costs
Paternity/Maternity Leave
Investment in training and certifications to broaden and deepen your technical skills
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.