Systems Engineer III

This is a remote role that may be hired in several markets across the United States.

Responsible for the architecture, administration, and maintenance of the Splunk Enterprise and Splunk Enterprise Security platforms. Handle requests from partner IT teams for implementation and changes as required. Partner closely with partner teams for data onboarding, alerting, and knowledge object creation. Be the primary point of contact for incidents regarding the Splunk platform. Responsible for technical document creation and knowledge sharing across Enterprise Monitoring Team and other partner IT teams. Ensure training is provided and stakeholders are informed. Perform on-call duties as required. Set up, administer and maintain protocols for enterprise-wide log and event management. Set up, administer, and maintain Splunk Infrastructure and Configurations Design and implement solutions to address new use cases or data collection needs. Provide consultation to Splunk user base on best practices, and guidance and assistance creating and maintaining knowledge objects. Integrate Splunk with other platforms. Configure the monitoring of critical systems via Splunk. Manage the performance of the Splunk platform. Correlate disparate events from monitoring platforms. Create and author technical documentation for both internal team consumption as well as user-base consumption.

Position requires a Bachelor's degree in Information Systems, Computer Science, or a related field of study plus six (6) years of experience in the job offered or six (6) years of experience as Systems Programmer, Software Developer, SQL Database Administrator, or a related occupation. Alternatively, employer will accept an Associate's degree in Information Systems, Computer Science, or a related field of study plus twelve (12) years of experience in the job offered or twelve (12) years of experience as Systems Programmer, Software Developer, SQL Database Administrator, or a related occupation.

Requires experience in Splunk implementation and maintenance in a mid-large scale cross-functional organization supporting enterprise security, networking, infrastructure, and applications. Requires experience with multi-site environments and data administration. Requires experience scaling and migrating Splunk components such as indexers and search heads. Requires strong knowledge of the Splunk CLI and configuration management via conf files, API development (REST or JSON), Linux Servers (Rhel 7 or higher), and Syslog (rsyslog or syslog-ng). Currently holds or has held the following certification: Splunk Admin Certification.

The base pay for this position is generally between $144,812 to $186,018 per year. Actual starting base pay will be determined based on skills, experience, location, and other non-discriminatory factors permitted by law. For some roles, total compensation may also include variable incentives, bonuses, benefits, and/or other awards as outlined in the offer of employment.

Benefits are an integral part of total rewards and First Citizens Bank is committed to providing a competitive, thoughtfully designed and quality benefits program to meet the needs of our associates. More information can be found at https://jobs.firstcitizens.com/benefits

This job posting is expected to remain active for 31 days from the initial posting date listed above. If it is necessary to extend this deadline, the posting will remain active as appropriate. Job postings may come down early due to business need or a high volume of applicants. #EJC and #LI-DNI