Senior Splunk Platform Engineer Remote Observability & SIEM

ecsfederal; Virginia (MN); Hybrid; USD 140,000 - 190,000; Full time

Job summary

Everforth ECS is seeking a Sr. Splunk Engineer to join our Professional Services team remotely.

The role focuses on designing, scaling, and operating large‑scale Splunk environments across federal and enterprise contexts, with emphasis on observability, SIEM, and automation. You will design deployments, optimize indexing and searches, write automation (Python, Bash), and work closely with cloud, security, and client stakeholders to deliver reliable, cost‑efficient Splunk solutions, while

Qualifications

• Deep, hands-on expertise with Splunk Enterprise and Splunk Cloud.
• Experience designing, deploying, and operating production-scale Splunk environments.
• Ability to work directly with customers to design and optimize observability and SIEM platforms.
• Willingness to support domestic or international on-site engagements; U.S. Passport and ability to obtain clearance.

Responsibilities

• Design, deploy, and maintain Splunk Enterprise and Splunk Cloud environments.
• Lead customer-facing implementations for observability, security monitoring, and compliance.
• Develop and optimize data onboarding, ingestion pipelines, indexing strategies, SPL searches, dashboards, alerts, and correlation searches.
• Design and implement Splunk use cases aligned to customer requirements and mission outcomes.
• Write scripts and automations (Python, PowerShell, Bash) to improve data ingestion and platform operations.
• Deploy and operate Splunk across on-premises, cloud, GovCloud, and hybrid environments.
• Automate deployments and environment management using Terraform, Ansible, CI/CD pipelines.
• Integrate Splunk with enterprise tooling including endpoint, identity, cloud, and network telemetry sources.
• Monitor platform health, troubleshoot performance issues, and optimize for scalability and cost efficiency.
• Provide technical leadership through architecture discussions and reviews.
• Create and maintain documentation including solution architectures and runbooks.

Skills

Splunk Enterprise

Splunk Cloud

SPL

Data onboarding

Automation (Python)

Linux/Unix

Cloud platforms

Customer-facing

Tools

Terraform

Ansible

CI/CD

Python

PowerShell

Bash

Job description

Everforth ECS is seeking a Sr. Splunk Engineer to join our Professional Services team remotely.

The role focuses on designing, scaling, and operating large‑scale Splunk environments across federal and enterprise contexts, with emphasis on observability, SIEM, and automation. You will design deployments, optimize indexing and searches, write automation (Python, Bash), and work closely with cloud, security, and client stakeholders to deliver reliable, cost‑efficient Splunk solutions, while