Splunk Developer

Position Overview: We are seeking an experienced Senior Splunk Engineer for a hybrid contract in Austin TX. Responsibilities: The Senior Splunk Engineer will support a centralized enterprise logging initiative within a DevSecOps-focused Enterprise Architecture team. The role involves onboarding hundreds of systems and data sources into Splunk to enhance operational efficiency across network, cloud, server, and application environments. The engineer will be responsible for hands-on operational monitoring and troubleshooting using Splunk, including creating and optimizing searches, building dashboards, and supporting alerting workflows. This position requires collaboration with cross-functional teams to ensure reliable data ingestion, proper log validation, and the delivery of actionable insights through effective alerting and visualization strategies. Minimum Qualifications: • 4 years of hands-on experience with Splunk Enterprise and/or Splunk Cloud • 4 years of advanced proficiency in Search Processing Language (SPL), including writing optimized searches and using commands such as stats, timechart, eval, lookup, transaction, and data model, as well as tuning searches for performance at scale • 4 years of experience in data onboarding, including source type design, field extraction (regex, props.conf, transforms.conf), timestamp recognition, line breaking, and index design/strategy • 4 years of experience managing Splunk Technology Add-ons (TAs) for data onboarding, normalization, and CIM alignment • 4 years of experience with Common Information Model (CIM) mapping • 4 years of experience designing, building, and optimizing Splunk dashboards and alerts, including KPI-driven visualizations, real-time and scheduled alerts, threshold and anomaly-based detections, and alert tuning to reduce noise Preferred Qualifications: • 2 years of previous experience with cloud-native log sources • 2 years of knowledge of security tools such as EDR, IAM, firewalls, and IDS/IPS • 2 years of previous experience with Splunk Cloud environments, including FedRAMP • Experience with Splunk certifications such as Architect, Admin, or Certified Consultant What We Offer: Sistema offers competitive pay and solid benefits, including medical, dental, and vision coverage. We keep things simple, focus on people, and prioritize long-term relationships with our clients and consultants. Apply now if you’re a clear communicator, problem solver, and ready to work hybrid in Austin TX!