Senior Splunk Security Engineer - Cloud + On-Prem Ops

PlanIT Group; Reston (VA); On-site; USD 120,000 - 160,000; Full time

Job summary

US Government Client seeks an experienced Splunk Subject Matter Expert with strong engineering skills to design, deploy, and maintain on-premises and cloud-based Splunk environments. The role supports enterprise-level monitoring, alerting, and reporting in a hybrid environment across Unix/Linux and cloud platforms.

Candidates must have deep Splunk architecture expertise, hands-on deployment and configuration experience, and strong collaboration with DevOps, Security, and IT teams.

Qualifications

• 5+ years of Splunk experience required.
• Manage knowledge objects via automation and config files in Splunk Enterprise (.conf/.cfg).
• Experience with Splunk deployment and configuration in large-scale environments.
• Proficiency in writing SPL queries, dashboards, and alerts.
• Experience with REST APIs for Splunk integration.
• Ability to analyze and troubleshoot complex data ingestion and parsing issues.
• Design automations workflow and dashboard interface.
• Self-starter with service mindset to drive projects to conclusion.
• Strong communication and collaboration across teams.
• A minimum of eight (8) years' overall relevant experience.
• Degree from accredited college; if not in applicable field, four additional years of related experience.

Responsibilities

• Design, deploy, and maintain on-premises and cloud-based Splunk environments.
• Support enterprise-level monitoring, alerting, and reporting.
• Collaborate with DevOps, Security, and IT teams to optimize performance and ensure data integrity.
• Provide operational support and ensure system availability for mission-critical operations.
• Perform off-hours and weekend maintenance, upgrades, and support when required.

Skills

Splunk

Knowledge objects

REST APIs

SPL queries

Unix/Linux

Automation scripting

RBAC

Cybersecurity

Mentoring

Experience 8+ years

Education

Bachelor's degree

Tools

Splunk App for Data Science

Splunk SOAR

AWS

GCP

Azure

Job description

US Government Client seeks an experienced Splunk Subject Matter Expert with strong engineering skills to design, deploy, and maintain on-premises and cloud-based Splunk environments. The role supports enterprise-level monitoring, alerting, and reporting in a hybrid environment across Unix/Linux and cloud platforms.

Candidates must have deep Splunk architecture expertise, hands-on deployment and configuration experience, and strong collaboration with DevOps, Security, and IT teams.