Senior Splunk Engineer — SIEM & Cloud Platform Architect

Leidos; Virginia (MN); On-site; USD 131,000 - 237,000; Full time

Job summary

Leidos is seeking an experienced Splunk Engineer SME to install, maintain, and optimize Splunk infrastructure for a strategic Cybersecurity Task Order. The role involves data onboarding, CIM alignment, dashboards, and knowledge objects, with interaction across senior management as needed.

You will design and deploy Splunk solutions in both on-prem and cloud environments, build automation for deployment, and support ongoing operations across multiple sites.

Qualifications

• Bachelor's degree with 12+ years in system administration, DB admin, or cyber roles.
• 12+ years in Linux/Windows administration or equivalent
• 10+ years of Splunk distributed deployments
• Experience implementing information security standards (FISMA/NIST/NSA)
• Expertise with Splunk Enterprise Security or SIEM integrations
• Advanced Splunk configuration (Indexer Clustering, Search Head)
• Experience onboarding data using forwarders, inputs, and CIM-compliant modeling

Responsibilities

• Install and maintain Splunk infrastructure across on-prem and cloud.
• Onboard data sources and ensure CIM compliance.
• Develop data models to accelerate queries, dashboards, and correlations.
• Create automation solutions for Splunk deployment and orchestration.
• Configure data sources and apps/add-ons for Splunk deployments.
• Collaborate with multiple teams to resolve technical problems at network, system, and app levels

Skills

Splunk

SIEM

Linux

Windows

Forwarders

Indexers

Search Head

Python

PowerShell

Networking

Education

Bachelor's Degree with Cybersecurity concentration

Tools

Splunk Enterprise Security

Splunk Add-ons

Splunk DB Connect

Job description

Leidos is seeking an experienced Splunk Engineer SME to install, maintain, and optimize Splunk infrastructure for a strategic Cybersecurity Task Order. The role involves data onboarding, CIM alignment, dashboards, and knowledge objects, with interaction across senior management as needed.

You will design and deploy Splunk solutions in both on-prem and cloud environments, build automation for deployment, and support ongoing operations across multiple sites.