Splunk /Cribl Engineer

Akkodis is seeking a Splunk /Cribl Engineer for a Contract job with a client in Plano TX/Charlotte NC/Richmond VA . Ideally looking for applicants with a solid background in the financial services industry . Splunk /Cribl Enginee r Contract Type: Contract, possible contract-to-hire (not available for candidates requiring visa sponsorshi p)Interview Process-2 rounds, both remote. Round 1 is a deep technical screen with the manager's delegates. Round 2 is a lighter technical plus team fit conversation with the manager's tea m.Location: Plano, TX / Charlotte, NC /Richmond VA -Hybrids- 3days we ekRate Range: $73/hour to $74/hour on W2 ; The rate may be negotiable based on experience, education, geographic location, and other factor s. Client is hiring a senior Splunk and Cribl platform engineer to support a large-scale, highly distributed Splunk Enterprise and Splunk Cloud environment (~600 TB/day ingestion, 20 clusters) that directly feeds the clients's Information Security and SOC teams. This is a production ownership role, not a monitoring/dashboard-building role, the person will own platform availability, performance, and reliability for a system with zero tolerated downtime. The team is also running a Splunk re-platform project, migrating from aging hardware to new infrastructu r e. Must-Have Qualificati ons - 5+ years hands-on administering large-scale Splunk Enterprise or Splunk Cloud environme nts - Real platform admin experience, not dashboard/alert building for other applications, this is a hard scr een - Cribl administration experience, required, not optio nal - Indexer clustering and search head cluster ing - Universal and heavy forwarder architectu res - SmartStore / S3-compatible object stor age - SPL, search optimization, summary indexing, data model accelerat ion - Security log ingestion and SIEM use case experie nce - Strong Linux administrat ion - Splunk Enterprise Admin certificat ion - 24x7 production environment experie n ce Nice to H ave - Splunk Enterprise Architect certificat ion - Splunk ES and SOAR experience (Phantom or equivalent, general exposure fi ne) - Cloud logging/security architecture exposure (AWS, Azure, G CP) - Windows Server administrat ion - Experience with monitoring, APM, or event management to o ls What You'll Do - Own end-to-end production support for Splunk Enterprise/Cloud: search head clusters, indexer clusters, deployers, deployment servers, forward ers - Lead incident response, troubleshooting, root cause analysis, and service restoration for Splunk and Cr ibl - Administer Cribl for data routing, filtering, enrichment, and cost optimizat ion - Onboard and normalize new security data sources for SIEM use, CIM compliance, field normalizat ion - Tune ingestion pipelines (props.conf, transforms.conf), index-time and search-time optimizat ion - Build dashboards, searches, and alerts supporting threat detection and investigati ons - Maintain runbooks, SOPs, and audit-ready documentat ion - Support the Splunk re-platform migration proj e ct If you are interested in this role, then please click APPLY NOW. For other opportunities available at Akkodis, or any questions, feel free to contact me at 3039422431 /soma.chakraborty@akkodisgroup.c om.Equal Opportunity Employer/Veterans/Disab ledBenefit offerings available for our associates include medical, dental, vision, life insurance, short-term disability, additional voluntary benefits, an EAP program, commuter benefits, and a 401K plan. Our benefit offerings provide employees the flexibility to choose the type of coverage that meets their individual needs. In addition, our associates may be eligible for paid leave including Paid Sick Leave or any other paid leave required by Federal, State, or local law, as well as Holiday pay where applicable. Disclaimer: These benefit offerings do not apply to client-recruited jobs and jobs that are direct hires to a clie nt.To read our Candidate Privacy Information Statement, which explains how we will use your information, please visit https://www.akkodis.com/en/privacy-poli cy.The Company will consider qualified applicants with arrest and conviction records in accordance with federal, state, and local laws and/or security clearance requirements, including, as applicab le:· The California Fair Chance Act· Los Angeles City Fair Chance Ordina nce· Los Angeles County Fair Chance Ordinance for Employ ers· San Francisco Fair Chance Ordina nce