Splunk Engineer

Splunk Engineer / Architect Overview Seeking a hands-on Splunk Engineer/Architect to design, deploy, and manage Splunk environments, with a strong focus on standing up infrastructure and onboarding new log sources. Responsibilities • Stand up and configure Splunk Enterprise (search heads, indexers, forwarders, deployment servers) • Design and implement log ingestion pipelines across applications, systems, and cloud environments • Onboard and integrate new log sources (syslog, application logs, cloud logs, security tools) • Configure ingestion components (Universal/Heavy Forwarders, HEC) and optimize data flow • Perform log parsing, filtering, normalization, and tuning for performance and scalability • Develop dashboards, alerts, and reports for monitoring and analysis • Troubleshoot ingestion and indexing issues across distributed environments • Partner with stakeholders to support log onboarding and data visibility requirements Required Qualifications • Experience building and configuring Splunk environments from the ground up • Strong background in log ingestion and data source onboarding • Deep understanding of Splunk architecture and data pipeline design • Proficiency with SPL, data inputs, parsing, and field extraction • Solid Linux/Windows and networking fundamentals