SITEC - Cybersecurity Analytics Systems Administrator - MacDill AFB
Peraton · MacDill AFB, FL, US
About this role
## Responsibilities - Support the SITEC (Special Operations Forces Information Technology Enterprise Contract) 3 EOM at **MacDill AFB (Florida)**, providing Operations & Maintenance (O&M) for enterprise security data and analytics platforms. - Perform **daily operations**, **health monitoring**, routine administration, and maintenance to ensure sustained availability, data integrity, data integration, and operational readiness of centralized **SIEM** systems. - Serve as the frontline custodian for **enterprise security telemetry feeds**: manage data forwarders, track ingestion pipelines, maintain user access controls, and assist analysts with dashboard views and search queries. - Manage **user access and RBAC**, including index permissions and routine configurations across analytical platforms such as **Splunk Enterprise**, **Splunk ES**, and **Microsoft Sentinel**. - Administer underlying **Red Hat Enterprise Linux (RHEL)** servers: OS-level user management, disk space allocation, system auditing, package updates, and baseline **STIG hardening**. - Deploy, configure, and maintain data collection agents (e.g., **Splunk Universal/Heavy Forwarders**, **Sentinel Azure Monitor**, syslog daemons) across endpoints and appliances. - Monitor platform health and performance (indexer status, search head performance, disk usage across hot/warm/cold tiers) to prevent data loss and service disruption. - Execute scheduled upgrades and maintenance: Splunk minor/version updates, technology add-on (TA) updates, and **SSL/TLS certificate renewals** across deployment tiers. - Troubleshoot ingestion and performance issues (e.g., broken forwarder feeds, missing sourcetypes, routine ingestion failures, basic search query performance issues). - Perform scheduled configuration backups (e.g., Splunk `etc` snapshots, Sentinel workspace templates) and verify restoration procedures. - Create alerts/notifications for unusual activity such as security breaches or system failures. - Maintain documentation of configurations and changes; perform basic troubleshooting to identify root causes. - Analyze data to identify patterns, trends, and other useful information. - Provide user support for system issues and incorrect usage. - Manage dashboard permissions and **automated PDF report generation**; ensure dashboards load consistently across user groups without permission-related errors. - Monitor real-time ingestion rates, sourcetype volumes, and alert on data drops, silence gaps, or duplicate event streams. - Assist security analysts with basic dashboard troubleshooting, updating broken filters, fixing simple **SPL/KQL** syntax errors, and validating input dropdown tokens. ## Qualifications - **DoD TS/SCI clearance** - **DoD 8570 IAT II** certification (DoW 8140 compliant) under **Work Role Code 451 – Systems Administrator (Intermediate – Intermediate level or higher)** - Experience requirements (minimum): - **12 years with HS degree** - **10 years with AS/AA degree** - **8 years with BS/BA** - **6 years with MS/MA** ## Salary Range - **$66,000 – $106,000** (typical range; final offer depends on experience, education, location, and contract/business factors) ## Company Overview Peraton is a next-generation national security company and enterprise IT provider supporting missions across land, sea, space, air, and cyberspace. Learn more at **peraton.com**. ## EEO Equal opportunity employer, including disability and protected veterans, or other characteristics p
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.