Splunk Engineer

Linuxconfig; Redmond, Northern (WA, KY); Hybrid; USD 130,000 - 200,000; Full time

Job summary

SpaceX is seeking a Splunk Engineer to deploy, administer, and support a distributed Splunk environment at enterprise scale. The role emphasizes automation, standardization, and monitoring to protect SpaceX systems and mission-critical data.

The engineer will write SPLs, onboard data sources, and ensure performance and capacity across a large log-collection infrastructure. Onsite work in Redmond, WA, with competitive compensation and benefits.

Qualifications

• 2+ years of experience administering or implementing Splunk in a professional setting.
• Experience writing complex regex for field mappings and identifying patterns.
• Experience with Puppet, Ansible, or other automation frameworks.

Responsibilities

• Deploy, Admin and Support distributed Splunk environment at an enterprise scale.
• Standardize Splunk agent and enterprise deployment, configuration and management with automation.
• Help monitor and maintain the logging platform's performance, availability, and capacity.
• Write Complex SPLs to help Infosec and other IT organizations with their dashboards and alerts.
• Troubleshoot Splunk Instances and Splunk Universal Forwarder problems.
• Data onboarding, governance, enrichment and fields extraction for various use cases.

Skills

Splunk administration

Regex development

Automation frameworks

Tools

Puppet

Ansible

Job description

SpaceX was founded under the belief that a future where humanity is out exploring the stars is fundamentally more exciting than one where we are not. Today SpaceX is actively developing the technologies to make this possible, with the ultimate goal of enabling human life on Mars.

SPLUNK ENGINEER

SpaceX is hiring a Splunk Engineer to help protect and drive the SpaceX mission. Our engineers are responsible for deploying, administrating and supporting a distributed Splunk environment at an enterprise scale. As a highly visible and dynamic organization, we must value and guard against damage to our internal information, our physical hardware, and our reputation and brand. It is paramount that we defend against loss of control or confidence in our systems, to guarantee the highest probability of success.

RESPONSIBILITIES

• Deploy, Admin and Support distributed Splunk environment at an enterprise scale.
• Standardize Splunk agent and enterprise deployment, configuration and management with automation.
• Help monitor and maintain the logging platform's performance, availability, and capacity.
• Write Complex SPLs to help Infosec and other IT organizations with their dashboards and alerts.
• Troubleshoot Splunk Instances and Splunk Universal Forwarder problems.
• Data onboarding, governance, enrichment and fields extraction for various use cases.

BASIC QUALIFICATIONS

• 2+ years of experience administering or implementing Splunk in a professional setting.
• Experience writing complex regex for field mappings and identifying patterns.
• Experience with Puppet, Ansible, or other automation frameworks.

PREFERRED SKILLS AND EXPERIENCE

• Certifications such as Splunk Enterprise Certified Architect, Splunk Enterprise Security Admin and Splunk Core Consultant.
• Familiarity with integrating enterprise applications and on-boarding new log sources.
• Familiarity with aerospace, satellite communications, launch vehicle, or factory-floor logging environments.
• Knowledge in the Common Information Model (CIM) with a strong understanding between the CIM and knowledge objects.
• Experience maintaining on-premises deployments of Splunk Core and Splunk Enterprise Security by supporting hundreds of users.
• Experience in identifying visibility gaps for SOC detections and onboarding custom data sources into Splunk.
• Experience with System Administration, DevOps, or Site Reliability Engineering.
• Experience developing or extending Splunk with Python (custom commands, modular inputs, alert actions, or apps) beyond basic SPL.
• Knowledge of Splunk SOAR (or equivalent security orchestration) and integrating Splunk with EDR, threat intel, or other security tools.
• Experience applying Splunk Machine Learning Toolkit (MLTK) or similar for anomaly detection in operational or security data.
• Hands‑on experience with Git, CI/CD, or infrastructure-as-code practices specifically for Splunk configurations and knowledge objects.
• Advanced Linux systems knowledge for large‑scale Splunk clusters.
• Experience supporting mission‑critical, 24/7 operational environments with strict uptime and rapid incident response requirements.

ADDITIONAL REQUIREMENTS

• Must be willing to work extended hours and weekends as needed.
• This role requires you to be onsite. Hybrid or remote work will not be considered.

COMPENSATION AND BENEFITS

• Pay Range - Level 1: $130,000.00 - $165,000.00
• Pay Range - Level 2: $150,000.00 - $200,000.00

Your actual level and base salary will be determined on a case‑by‑case basis and may vary based on the following considerations: job‑related knowledge and skills, education, and experience.

Base salary is just one part of your total rewards package at SpaceX. You may also be eligible for long‑term incentives, in the form of company stock or long‑term cash awards, as well as potential discretionary bonuses and the ability to purchase additional stock at a discount through an Employee Stock Purchase Plan. You will also receive access to comprehensive medical, vision, and dental coverage, access to a 401(k) retirement plan, short and long‑term disability insurance, life insurance, paid parental leave, and various other discounts and perks. You may also accrue 3 weeks of paid vacation and will be eligible for 10 or more paid holidays per year. Employees in Washington State accrue paid sick time in compliance with state and federal law. Company shuttles are offered to employees for roundtrip travel from select Seattle locations to the SpaceX Redmond office Monday to Friday.

• To conform to U.S. Government export regulations, applicant must be a (i) U.S. citizen or national, (ii) U.S. lawful, permanent resident (aka green card holder), (iii) Refugee under 8 U.S.C. § 1157, or (iv) Asylee under 8 U.S.C. § 1158, or be eligible to obtain the required authorizations from the U.S. Department of State. Learn more about the ITAR here .

SpaceX is an Equal Opportunity Employer; employment with SpaceX is governed on the basis of merit, competence and qualifications and will not be influenced in any manner by race, color, religion, gender, national origin/ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability or any other legally protected status.

Applicants wishing to view a copy of SpaceX’s Affi… or applicants requiring reasonable accommodation to the application/interview process should reach out to [e-mail]

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self‑identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in SpaceX’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service‑connected disability.

A "recently separated veteran" means any veteran during the three‑year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.