Splunk Developer (Remote)

Posted Date 2 months ago(10/4/2022 10:32 AM)
Requisition #
Security Clearance
Full Time
Portal Location : Location


We are seeking Splunk Developers (All levels) to support our Internal Revenue Service (IRS) client. As part of the design and implementation effort, the Splunk developer will participate in various aspects of the implementation, including using Splunk to develop a proof of concept where legacy information systems are migrated to Splunk Enterprise. The Senior Splunk Developer will have to model data from several legacy and/or modern applications before ingesting the data into Splunk. The Splunk Developer will work closely with government personnel and other Noblis professionals in a team environment.


The Job Responsibilities include but are not limited to:

* Design and develop an “end to end” electronic transaction visibility, including large scale processing, integration, and analysis of system logs and databases in Splunk.

* Develop statistical behavior models, and provide support for the development of machine learning approaches.

* Develop visualization dashboards and indicators that identify anomalous activities.

* Assist with the development of project status briefings and dashboards for IRS executives

* Interact directly with client project team members and operational staff


***This is a remote opportunity***




Minimun requirements

  • Five (5)+ years of experience and a  Bachelor's Degree and from an accredited college or university required or a high school diploma and an additional five (5) years of professional experience can substitute for a degree.
  • Knowledge on security applications and knowledge of working with regular expressions to effectively extract key tokens of data into meaningful fields.
  • Experience with application servers being used for the extraction, transformation, and loading (ETL) of operational logs and individuals audit data deposited in a staging area for
  • generating audit analysis reports.
  • Familiarity with the Configuration file options that are not available through the GUI.
  • Experience with AMDAS on MQ Series will be critical. Cyber security experience.
  • A sophisticated understanding of Splunk “Search” language. A deep understanding of Splunk Dashboards, Reports, Lookup Tables, and Summary Indexes.
  • Knowledge of how to customize Dashboards via the XML source.
  • Awareness of the Common Information Model and how to apply it directly and indirectly to data feeds.
  • Expert-level capabilities with regular expression.
  • Experience with Splunk Apps (both using and making).
  • Intermediate to Expert -level capability with the Python Scripting Language.
  • Awareness of how to handle null data and its impact on statistical analysis.
  • Experience with reviewing, analyzing and coordinating requirements for ingesting auditable and actionable events into Splunk.
  • Proven ability to work on and with teams comprised of the primary client and other client stakeholders dispersed across geographical sites.
  • Excellent verbal and written communication skills.
  • Candidates must meet requirements to obtain and maintain an IRS Minimum Background Investigation (MBI) clearance (active IRS Moderate Risk MBI clearance is a plus). Candidates must be a US Citizen or a Legal Permanent Resident (Green Card status) for 3 years, and be Federal Tax compliant.



  • Experience with administering Splunk instances, Universal Forwarders
  • Experience designing and implementing medium to large Splunk instances
  • Experience with implementing SPlunk within cloud environments
  • Experience implementing Splunk UBA and ES modules
  • Experience with DHS's Continuous Diagnostics and Mitigation Program
  • Experience writing Splunk Technical Add-ons
  • Experience with relational databases is a plus

Client Engagement

• Begin developing relationships one level up and two levels down. Identify and support opportunities to expand project scope beyond current deliverable and actively share information about clients’ emerging support needs and trends with team members and management.
· Participate on proposals


With the continuing impacts of COVID-19 around the world, we are taking action to protect the health and well-being of our colleagues and maintain the safety of the communities where we operate. Noblis seeks an environment free from COVID-19 and prefers all employees to be fully vaccinated for COVID-19.  Attestation of vaccination status will be required for employment with Noblis.  Unvaccinated employees may be subject to additional health and safety requirements to include any federal, state and/or client restrictions.


Noblis and our wholly owned subsidiaries, Noblis ESI, Noblis MSD and Noblis + Mikros Systems tackle the nation's toughest problems and apply advanced solutions to our clients' most critical missions. We bring the best of scientific thought, management, and engineering expertise together in an environment of independence and objectivity to deliver enduring impact on federal missions. Noblis works with a wide range of government clients in the defense, intelligence and federal civil sectors. Learn more at Noblis -About Us


Why work at a Noblis company?

Our employees find greater meaning in their work and balance the other things in life that matter to them. Our people are our greatest asset. They are exceptionally skilled, knowledgeable, team-oriented, and mission-driven individuals who want to do work that matters and benefits the public. Noblis has won numerous workplace awards. Noblis maintains a drug-free workplace.


Noblis is an Equal Opportunity Employer. Employment decisions are made without regard to race (as well as because of or on the basis of traits historically associated with race, including hair texture, hair type, and protective hairstyles such as braids, locks, and twists), color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, pregnancy, childbirth, lactation and related medical conditions, genetic factors, military/veteran status, or other characteristics protected by law.


Noblis is committed to the full inclusion of all qualified individuals. As part of this commitment, Noblis will ensure that persons with disabilities are provided reasonable accommodations. If reasonable accommodation is needed to participate in the job application or interview process, to perform essential job functions, and/or to receive other benefits and privileges of employment, please contact employee-relations@noblis.org

Apply for this job

Sorry the Share function is not working properly at this moment. Please refresh the page and try again later.
Share on your newsfeed

Connect With Us!

Want to know about available job opportunities at Noblis? Want to receive personalized alerts with jobs that match your skills and interests? Join the Noblis Talent Connection.