Senior Splunk Engineer

Role: Sr. Splunk Engineer Duration: 3+ Months Location: Bensalem, PA Job Description: The Sr. Splunk Engineer is responsible for engineering, deploying, configuring, and validating a multi-site, highly available Splunk Enterprise platform and extending it with Splunk Enterprise Security (ES). The role focuses on building scalable Splunk infrastructure, enabling security monitoring, and ensuring operational readiness across enterprise environments. Key Responsibilities: • Design and implement a highly available multi-site Splunk Enterprise deployment including Cluster Manager, License Master, Deployer, Deployment Server, Monitoring Console, indexer cluster, and search head cluster. • Deploy and configure Universal Forwarders and Heavy Forwarders and manage deployment apps and server classes. • Onboard and validate multiple data sources such as Windows, firewall, and cloud logs while ensuring CIM alignment. • Configure custom indexes, authentication systems (LDAP/SAML), SMTP relay, and load balancer integrations. • Install and operationalize Splunk Enterprise Security (ES) including dashboards, correlation searches, and notable events. • Tune correlation searches, thresholds, and platform performance for optimized monitoring. Required Qualifications: • 5+ years of experience with Splunk Enterprise in clustered environments. • Experience deploying and tuning Splunk ES in production. • Strong knowledge of data onboarding, CIM alignment, Linux administration, networking, and authentication systems.