Splunk Platform Engineer - SIEM & Data Pipeline Ownership

Experis Technology Group; Richmond (VA); On-site; USD 90,000 - 96,000; Full time

Benefits offered by this job

Health benefits

Dental plan

Vision plan

Health Savings Account

Flexible Spending Account (HSA/FSA)

Job summary

Experis Technology Group is seeking a Splunk Platform Engineer for Charlotte, Richmond, or Pennington to join our Platform Operations team, supporting security log ingestion and SIEM enablement.

The ideal candidate has 5+ years of hands-on experience with Splunk Enterprise or Splunk Cloud, strong clustering expertise, and proficiency with Linux administration.

You will own end-to-end production support, incident response, and Cribl data-pipeline optimization for reliability and threat detection.

Qualifications

• 5+ years of hands-on experience with Splunk Enterprise or Splunk Cloud.
• Experience with indexer clustering and search head clustering, and with forwarder architectures.
• Proven ability to lead production incidents, perform RCA, and drive preventive solutions.

Responsibilities

• Own end-to-end production support for a distributed Splunk environment (search head clusters, indexer clusters, deployers, deployment servers, and forwarders).
• Ensure high availability, performance, and resiliency of the Splunk platform for security and operational use cases.
• Lead incident response, troubleshooting, RCA, and service restoration for Splunk and Cribl platforms.
• Identify risks, capacity constraints, and bottlenecks; implement preventive and tuning measures.
• Enable Information Security and SOC teams by ensuring timely, accurate ingestion of security logs and SIEM readiness.

Skills

Splunk administration

Indexer/SH clustering

Linux administration

SPL/search optimization

Security log ingestion

Tools

Cribl

Job description

Experis Technology Group is seeking a Splunk Platform Engineer for Charlotte, Richmond, or Pennington to join our Platform Operations team, supporting security log ingestion and SIEM enablement.

The ideal candidate has 5+ years of hands-on experience with Splunk Enterprise or Splunk Cloud, strong clustering expertise, and proficiency with Linux administration.

You will own end-to-end production support, incident response, and Cribl data-pipeline optimization for reliability and threat detection.