Senior Splunk Engineer

Diné Development Corporation

About The Position

We are seeking a Senior Splunk Engineer to lead the architecture, implementation, and maintenance of our Splunk environments. In this role, you will be responsible for designing and developing scalable, high-performance Splunk solutions, innovating on the platform's capabilities, and ensuring its reliability and security. You will serve as a subject matter expert, providing technical guidance, mentoring junior engineers, and collaborating with various teams to meet the company's data and security objectives. Assist with transition from M-21-31 to M-26-14 compliance, including CISA framework analysis and crafting IHS’s internal compliance policies, processes, and procedures.

Requirements

Clearance: U.S. Citizen with an Active Public Trust Level-4 or higher, or ability to obtain one through background investigation
Education: Bachelor’s or master’s degree in computer science, Information Technology, or a related field is typically required.
Splunk Expertise: Deep knowledge of Splunk Enterprise, Splunk Cloud, and Splunk Observability Cloud. Advanced proficiency in SPL, creating complex dashboards, alerts, and data models.
Programming & Scripting: Strong programming skills in Python, Java, or another backend language, coupled with extensive experience in shell scripting (bash).
Data Technologies: Solid understanding of relational and NoSQL databases and advanced data structures.
Architecture: Proven experience with microservices, major cloud platforms (AWS, Azure), and containerization technologies like Kubernetes.
Tools: Hands-on familiarity with CI/CD tools, configuration management (i.e.: Ansible), vulnerability management tools (Tenable One), and modern observability platforms (Palo Alto CoreTex XDR).

Nice To Haves

Professional experience building and deploying custom Splunk applications.
Strong domain knowledge in cybersecurity, including IDS/IPS and SIEM/SEM concepts.
Demonstrated experience with cloud-native architecture and managing SaaS platforms.
Strong interpersonal and leadership skills, with a proven ability to mentor, coach, and lead through influence.
Creative and strategic approach to problem-solving, with the ability to maintain a "big picture" view while focusing on details.

Responsibilities

Design & Development: Architect and implement scalable, high-performance Splunk environments, including data ingestion pipelines, dashboards, alerts, and reports.
Solution Innovation: Research, prototype, and develop innovative Splunk-based solutions to improve platform capabilities or deliver new features for analytics, security, or DevOps use cases.
Infrastructure Management: Maintain and optimize the Splunk infrastructure, including indexing, search performance, and data retention strategies to ensure system health and efficiency.
Integration & Automation: Integrate Splunk with other critical systems (e.g., SIEM, DevOps tools, databases) and automate repetitive tasks using scripting and CI/CD tools.
Support & Troubleshooting: Act as a final escalation point to resolve complex operational issues, troubleshoot performance bottlenecks, and guarantee high system reliability and availability.
Documentation & Knowledge Sharing: Create comprehensive documentation for designs, processes, and solutions. Actively mentor junior engineers and share knowledge across the team.
Compliance & Security: Ensure all Splunk environments comply with Federal security policies, industry standards like ISO, and ITIL best practices. Lead the transition from M-21-31 to M-26-14 compliance, including CISA framework analysis and crafting IHS’s internal compliance policies, processes, and procedures.