Senior Splunk Engineer - Remote Infrastructure Operations

GovCIO; Boise (ID); On-site; USD 105,000 - 145,000; Full time

Benefits offered by this job

EAP

Corporate Discounts

Learning & Development platform

Certification Assistance

Referral Bonus Program

Internal Mobility Program

Pet Insurance

Flexible Work Environment

Job summary

GovCIO is hiring a Senior Splunk Engineer - Infrastructure Operations to support the AOUSC NLS project. The role focuses on designing, implementing, and operating Splunk Core, Enterprise Security, IT Service Intelligence, and related Splunk components across multiple data centers and remote environments.

Responsibilities include monitoring health via DMC, optimizing indexing and licensing, troubleshooting ingestion and parsing, and maintaining data governance while supporting onboarding and RBAC

Qualifications

• Expert skills in Enterprise Security, ITSI, SOAR, and the Splunk product family.
• Able to design, implement, and operate Splunk Core, Enterprise Security, ITSI, SOAR, Splunk Cloud, Splunk On-Call, and Multi-Site Index Clustering.

Responsibilities

• Design, implement, and operate the Splunk Core, Enterprise Security, ITSI, Phantom (SOAR), Splunk Cloud, Splunk On-Call, and Multi-Site Index Clustering environment.
• Monitor overall Splunk health via Monitoring Console (DMC) including indexer, search head, and cluster master status.
• Track indexing rates, license usage, queue health, and search concurrency to identify issues early.
• Monitor CPU, memory, and disk usage across Splunk components for optimal performance.
• Respond promptly to health alerts, DMC warnings, or anomalies on dashboards.
• Investigate and resolve user issues like access problems, failed searches, or non-triggering alerts.
• Troubleshoot data ingestion, parsing, and indexing across Universal Forwarders, Heavy Forwarders, and HEC endpoints.
• Validate new data source onboardings by confirming sourcetype, timestamp, and field extraction integrity.
• Support data source owners with forwarder deployment, syslog setup, and connectivity troubleshooting.

Skills

Splunk Core

Enterprise Security

ITSI

SOAR

Splunk Cloud

Splunk On-Call

Multi-Site Index Clustering

RBAC

Education

Bachelor's degree or higher

Tools

Monitoring Console (DMC)

Forwarders/Heavy Forwarders

HEC

Job description

GovCIO is hiring a Senior Splunk Engineer - Infrastructure Operations to support the AOUSC NLS project. The role focuses on designing, implementing, and operating Splunk Core, Enterprise Security, IT Service Intelligence, and related Splunk components across multiple data centers and remote environments.

Responsibilities include monitoring health via DMC, optimizing indexing and licensing, troubleshooting ingestion and parsing, and maintaining data governance while supporting onboarding and RBAC