Splunk Engineer

Capgemini; Atlanta (GA); On-site; USD 54,000 - 84,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

Retirement benefits

Job summary

Tundra Technical Solutions is seeking a Splunk-focused engineer in the Atlanta area to design and maintain dashboards, optimize SPL queries, and manage data onboarding across forwarders, HEC, and syslog integrations.

You will collaborate with operations, infrastructure, and security teams to tune alerts, define CIM alignment, and provide training and documentation for self-service monitoring.

Qualifications

• Strong experience with Splunk Enterprise/Cloud and dashboards.
• Expert SPL query development and performance optimization.
• Experience with log ingestion pipelines and integrations.
• Familiarity with monitoring, alerting and incident management.

Responsibilities

• Design and maintain Splunk dashboards (Classic & Dashboard Studio).
• Develop and optimize SPL queries for performance and scalability.
• Manage data onboarding using Universal Forwarders, Heavy Forwarders, HEC, and syslog integrations.
• Own index strategy, retention policies, sourcetypes, field extractions, and CIM alignment.
• Configure and tune alerts with actionable thresholds, suppression, and routing.
• Build dynamic dashboards with drilldowns and filters for self-service troubleshooting.
• Support onboarding of new applications/brands and ensure consistent monitoring coverage.
• Collaborate with app, infra, and security teams to resolve ingestion and data issues.
• Implement RBAC and knowledge object permissions for access control.
• Create documentation, runbooks, and support users with training.

Skills

Splunk (Enterprise/Cloud)

SPL query development

Log ingestion pipelines

Monitoring and alerting

Incident management

Tools

Azure/AWS

Python/Shell scripting

Splunk Observability

New Relic

Job description

Key Responsibilities:

• Design and maintain Splunk dashboards (Classic & Dashboard Studio) for operations and business reporting
• Develop and optimize SPL queries (rex, spath, stats, timechart, etc.) for performance and scalability
• Manage data onboarding using Universal Forwarders, Heavy Forwarders, HEC, and syslog integrations
• Own index strategy, retention policies, sourcetypes, field extractions, and CIM alignment
• Configure and tune alerts with actionable thresholds, suppression, and routing
• Build dynamic dashboards with drilldowns and filters for self-service troubleshooting
• Support onboarding of new applications/brands and ensure consistent monitoring coverage
• Collaborate with app, infra, and security teams to resolve ingestion and data issues
• Implement RBAC and knowledge object permissions for access control
• Create documentation, runbooks, and support users with training

Required Skills:

• Strong experience with Splunk (Enterprise/Cloud)
• Expertise in SPL query development and optimization
• Experience with log ingestion pipelines and integrations
• Understanding of monitoring, alerting, and incident management
• Strong troubleshooting and analytical skills

Preferred:

• Experience in SRE / NOC / Observability environments
• Exposure to APM / metrics tools (Splunk Observability, New Relic, etc.)
• Knowledge of Azure/AWS and basic scripting (Python/Shell)

The pay range that the employer in good faith reasonably expects to pay for this position is $39.30/hour - $61.40/hour. Our benefits include medical, dental, vision and retirement benefits. Applications will be accepted on an ongoing basis.

Tundra Technical Solutions is among North America's leading providers of Staffing and Consulting Services. Our success and our clients' success are built on a foundation of service excellence. We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic. Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable law, including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act. Unincorporated LA County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, potentially resulting in the withdrawal of a conditional offer of employment: client provided property, including hardware (both of which may include data) entrusted to you from theft, loss or damage; return all portable client computer hardware in your possession (including the data contained therein) upon completion of the assignment, and; maintain the confidentiality of client proprietary, confidential, or non-public information. In addition, job duties require access to secure and protected client information technology systems and related data security obligations.