Splunk Engineer: Dashboards, SPL & Observability

Capgemini; Atlanta (GA); On-site; USD 54,000 - 84,000; Full time

Benefits offered by this job

Medical benefits

Dental benefits

Vision benefits

Retirement benefits

Job summary

Tundra Technical Solutions is seeking a Splunk-focused engineer in the Atlanta area to design and maintain dashboards, optimize SPL queries, and manage data onboarding across forwarders, HEC, and syslog integrations.

You will collaborate with operations, infrastructure, and security teams to tune alerts, define CIM alignment, and provide training and documentation for self-service monitoring.

Qualifications

• Strong experience with Splunk Enterprise/Cloud and dashboards.
• Expert SPL query development and performance optimization.
• Experience with log ingestion pipelines and integrations.
• Familiarity with monitoring, alerting and incident management.

Responsibilities

• Design and maintain Splunk dashboards (Classic & Dashboard Studio).
• Develop and optimize SPL queries for performance and scalability.
• Manage data onboarding using Universal Forwarders, Heavy Forwarders, HEC, and syslog integrations.
• Own index strategy, retention policies, sourcetypes, field extractions, and CIM alignment.
• Configure and tune alerts with actionable thresholds, suppression, and routing.
• Build dynamic dashboards with drilldowns and filters for self-service troubleshooting.
• Support onboarding of new applications/brands and ensure consistent monitoring coverage.
• Collaborate with app, infra, and security teams to resolve ingestion and data issues.
• Implement RBAC and knowledge object permissions for access control.
• Create documentation, runbooks, and support users with training.

Skills

Splunk (Enterprise/Cloud)

SPL query development

Log ingestion pipelines

Monitoring and alerting

Incident management

Tools

Azure/AWS

Python/Shell scripting

Splunk Observability

New Relic

Job description

Tundra Technical Solutions is seeking a Splunk-focused engineer in the Atlanta area to design and maintain dashboards, optimize SPL queries, and manage data onboarding across forwarders, HEC, and syslog integrations.

You will collaborate with operations, infrastructure, and security teams to tune alerts, define CIM alignment, and provide training and documentation for self-service monitoring.