Design and implement distributed, high-performance Splunk Enterprise and ES architectures spanning on-premises and hybrid cloud environments.
Build and optimize data ingestion pipelines, develop data models, and tune search performance for reliability and scalability.
Ensure platform compliance with FISMA, NIST RMF, M-21-31 log retention mandates, CDM program requirements, and FedRAMP authorization boundaries.
Provide technical governance over Splunk platform decisions and roadmap evolution.
Mentor junior engineers on SPL, data onboarding, and ES content development.
Collaborate with SOC, network, and IT teams to align Splunk capabilities with operational and mission objectives.

Requirements

US Citizenship is Required
Ability to pass a DHS EOD Clearance
Bachelor's degree plus 10 years of relevant experience, or Master's degree plus 15 years.
10+ years of Splunk experience in a large clustered environment.
Demonstrated expertise in Splunk administration and architecture, Linux administration, cloud platforms (AWS/Azure), scripting, and log parsing.
Splunk Architect certifications required; Splunk ES Certified Admin
Cribl Admin certification preferred.
Public Trust eligibility required
[Secret clearance preferred]

Benefits

401(k), including an employer match of 100% of the first 3% contributed and 50% of the next 2% contributed
Medical, Dental, and Vision Insurance (available on the 1st day of the month following your first day of employment)
Group Term Life, Short-Term Disability, Long-Term Disability
Voluntary Life, Hospital Indemnity, Accident, and/or Critical Illness
Participation in the Discretionary Time Off (DTO) Program
11 Paid Holidays Annually

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Splunkdata ingestion pipelinesdata modelssearch performance tuningLinux administrationcloud platformsscriptinglog parsinghigh-performance architecturedistributed systems

Soft Skills

mentoringcollaborationtechnical governance

Certifications

Splunk ArchitectSplunk ES Certified AdminCribl Admin