Remote Senior Splunk Engineer — Observability & SIEM Lead

ECS Corporate Services; Fairfax (VA); À distance; USD 140 000 - 190 000; Plein temps

Résumé du poste

Everforth ECS is seeking a Sr. Splunk Engineer to join our team remotely. You will design, deploy, and maintain Splunk Enterprise and Splunk Cloud environments across on-premises, cloud, GovCloud, and hybrid setups.

You will lead customer-facing implementations, optimize data onboarding and indexing strategies, write automation scripts (Python, PowerShell, Bash), and collaborate with cloud, DevOps, and security stakeholders to deliver scalable observability and SIEM solutions.

Qualifications

• Deep, hands-on expertise with Splunk Enterprise and Splunk Cloud.
• Strong experience with SPL, data onboarding, indexer/search head architecture, and performance tuning.
• Solid understanding of SIEM, observability, logging, metrics, and distributed systems.
• Experience designing, deploying, and operating production-scale Splunk environments.
• Strong scripting and automation skills (Python, PowerShell, Bash, etc.).
• Experience working in customer-facing or professional services environments.
• Strong Linux/Unix, networking, and cloud platform experience (AWS, Azure, GCP).
• Ability to explain complex technical concepts clearly to both technical and non-technical stakeholders.

Responsabilités

• Design, deploy, and maintain Splunk Enterprise and Splunk Cloud environments, including indexers, search heads, forwarders, and management components.
• Lead customer-facing implementations of Splunk for observability, security monitoring, compliance, and operational intelligence.
• Develop and optimize data onboarding, ingestion pipelines, indexing strategies, SPL searches, dashboards, alerts, and correlation searches.
• Design and implement Splunk use cases aligned to customer requirements and mission outcomes.
• Write scripts, automation, and integrations to improve data ingestion, enrichment, monitoring, and platform operations.
• Deploy and operate Splunk across on-premises, public cloud, GovCloud, and hybrid environments.
• Automate deployments and environment management using Terraform, Ansible, CI/CD pipelines, and infrastructure-as-code practices.
• Integrate Splunk with enterprise and security tooling, including endpoint, identity, cloud, and network telemetry sources.
• Monitor platform health, troubleshoot performance issues, and optimize Splunk environments for scalability, resilience, and cost efficiency.
• Provide technical leadership through architecture design sessions, best-practice guidance, and implementation reviews.
• Create and maintain documentation including solution architectures, deployment patterns, runbooks, and handoff materials.

Connaissances

Customer-facing

Communications

Cloud experience

Linux/Unix

Networking

Outils

Splunk Enterprise

Splunk Cloud

SPL

Python

PowerShell

Bash

Terraform

Ansible

Description du poste

Everforth ECS is seeking a Sr. Splunk Engineer to join our team remotely. You will design, deploy, and maintain Splunk Enterprise and Splunk Cloud environments across on-premises, cloud, GovCloud, and hybrid setups.

You will lead customer-facing implementations, optimize data onboarding and indexing strategies, write automation scripts (Python, PowerShell, Bash), and collaborate with cloud, DevOps, and security stakeholders to deliver scalable observability and SIEM solutions.