Splunk Platform Engineer (Charlotte, Richmond, or Pennington)

Experis Technology Group; Richmond (VA); On-site; USD 90,000 - 96,000; Full time

Benefits offered by this job

Health benefits

Dental plan

Vision plan

Health Savings Account

Flexible Spending Account (HSA/FSA)

Job summary

Experis Technology Group is seeking a Splunk Platform Engineer for Charlotte, Richmond, or Pennington to join our Platform Operations team, supporting security log ingestion and SIEM enablement.

The ideal candidate has 5+ years of hands-on experience with Splunk Enterprise or Splunk Cloud, strong clustering expertise, and proficiency with Linux administration.

You will own end-to-end production support, incident response, and Cribl data-pipeline optimization for reliability and threat detection.

Qualifications

• 5+ years of hands-on experience with Splunk Enterprise or Splunk Cloud.
• Experience with indexer clustering and search head clustering, and with forwarder architectures.
• Proven ability to lead production incidents, perform RCA, and drive preventive solutions.

Responsibilities

• Own end-to-end production support for a distributed Splunk environment (search head clusters, indexer clusters, deployers, deployment servers, and forwarders).
• Ensure high availability, performance, and resiliency of the Splunk platform for security and operational use cases.
• Lead incident response, troubleshooting, RCA, and service restoration for Splunk and Cribl platforms.
• Identify risks, capacity constraints, and bottlenecks; implement preventive and tuning measures.
• Enable Information Security and SOC teams by ensuring timely, accurate ingestion of security logs and SIEM readiness.

Skills

Splunk administration

Indexer/SH clustering

Linux administration

SPL/search optimization

Security log ingestion

Tools

Cribl

Job description

Our client, a leading financial services organization, is seeking a Splunk Platform Engineer (Charlotte, Richmond, or Pennington) to join their team. As a Splunk Platform Engineer (Charlotte, Richmond, or Pennington), you will be part of the Platform Operations organization supporting security log ingestion and SIEM enablement. The ideal candidate will have a production-owners mindset, strong technical credibility in Splunk and data pipelines, and the ability to communicate clearly with senior technical and business stakeholders.

Job Title: Splunk Platform Engineer (Charlotte, Richmond, or Pennington)

Location:Charlotte, NC or Pennington, NJ or Richmond, VA

Pay Range:$65-$70/hr

What's the Job?

• Own end-to-end production support for a highly distributed Splunk Enterprise and Splunk Cloud environment, including search head clusters, indexer clusters, deployers, deployment servers, and forwarders.
• Ensure high availability, performance, and resiliency of the Splunk platform supporting security and operational use cases.
• Lead incident response, troubleshooting, root cause analysis (RCA), and service restoration for Splunk and Cribl platforms.
• Proactively identify risks, capacity constraints, and performance bottlenecks; implement preventive and tuning measures.
• Enable Information Security and SOC teams by ensuring timely, accurate, and reliable ingestion of security logs and SIEM readiness.

What's Needed?

• 5+ years of hands-on experience administering large-scale Splunk Enterprise or Splunk Cloud environments.
• Strong expertise in indexer clustering and search head clustering, Universal and heavy forwarder architectures, and SmartStore/S3-compatible object storage.
• Deep experience with security log ingestion and SIEM use cases, including SPL and search optimization, summary indexing, and data model acceleration.
• Proven ability to lead production incidents, perform RCA, and drive preventive solutions.
• Strong Linux administration skills and experience managing Splunk configuration and apps, including props.conf and transforms.conf tuning.

What's in it for me?

• Work as a trusted platform owner, directly improving Splunk availability, scalability, and reliability for mission-critical security use cases.
• Partner closely with Information Security, SOC, architecture, engineering, and operations teams to strengthen SIEM enablement and data quality.
• Build and support dashboards, searches, and alerts that enable threat detection, investigations, and reporting.
• Administer and optimize Cribl data pipeline routing, filtering, enrichment, and cost optimization while maintaining data integrity and performance.
• Operate in a 24x7 production environment where your calm, decisive execution during high-severity incidents makes a measurable impact.

Upon completion of waiting period consultants are eligible for:

• Medical and Prescription Drug Plans
• Dental Plan
• Vision Plan
• Health Savings Account
• Health Flexible Spending Account
• Dependent Care Flexible Spending Account
• Supplemental Life Insurance
• Short Term and Long Term Disability Insurance
• Business Travel Insurance
• 401(k), Plus Match
• Weekly Pay

We are recognized consistently for our diversity - as a best place to work for Women, Inclusion, Equality and Disability and in 2023 ManpowerGroup was named one of the World's Most Ethical Companies for the 14th year - all confirming our position as the brand of choice for in-demand talent.