Splunk Engineer (Hybrid 1 Day Onsite – DC)

Prallax is hiring for a Splunk Solutions Architect with active security clearance (TS Preferred; candidates with lesser clearance levels will be considered). Position offered on c2c/1099, also available as w2. At Parallax Consulting, we specialize in delivering innovative cybersecurity, data analysis, and IT infrastructure solutions. We are seeking a highly skilled Splunk Engineer with expertise in Splunk Core technologies and premium apps to join our team. This role requires a professional with a security clearance and a commitment to delivering exceptional results in enterprise-level implementations. Key Responsibilities: Splunk Deployment and Management Architect, deploy, and optimize Splunk Core and premium apps (e.g., Splunk Enterprise Security, ITSI, Splunk SOAR) for enterprise environments. Ensure performance, scalability, and reliability through best practices and innovative solutions. Customer Engagement and Consulting Serve as a trusted advisor to clients, offering guidance on implementing and integrating Splunk solutions. Conduct technical workshops and user training for Splunk Core and premium apps to enhance customer understanding and utilization. Data Onboarding and Analysis Develop and customize dashboards, reports, and alerts aligned with client operational and security objectives. Incident Response and Security Use Cases Partner with Security Operations Center (SOC) teams to build and implement advanced security monitoring and alerting use cases. Tailor Splunk Enterprise Security (ES) and other premium apps to the organization’s unique requirements. Training and Enablement Provide training for Splunk premium apps, such as Splunk ITSI, Splunk SOAR, and Splunk Enterprise Security, to empower client teams. Develop documentation and conduct workshops to transfer knowledge and enhance end-user proficiency. Collaboration and Documentation Collaborate with cross-functional teams, including network engineers, system administrators, and security analysts, to deliver cohesive solutions. Document configurations, processes, and solutions for knowledge sharing and compliance. What your day to day will look like Troubleshoot Splunk server and forwarder issues Provision, Operation and Maintenance of RHEL / Ubuntu Linux Servers (On-prem and Cloud hosted) and server less architecture technologies (containers, lambda, etc) Utilize Ansible and Gitlab to script / automate our re-occurring technical tasks Work with other Splunk team members to gather requirements, perform troubleshooting, and provide assistance with the creation of Splunk search queries and dashboards Step in to address and resolve issues in projects that require senior intervention Support and maintain complete logging infrastructure such as log storage, syslog and Windows Event Collector servers, and database connections Required Qualifications Active U.S. security clearance at Secret level or higher (TS/SCI strongly preferred); U.S. citizenship required for federal contract eligibility. Splunk Core Certified Admin or Splunk Enterprise Certified Admin credential in good standing. At least two years administering Splunk Enterprise on Linux, including indexer and searchhead clustering and performance tuning. Proficiency with Red Hat Enterprise Linux or Ubuntu server administration (installation, patching, services, networking). Demonstrated ability to onboard diverse data sources and build advanced SPL queries, dashboards, and alerts. Experience maintaining log collection infrastructure such as syslog-ng or Windows Event Collector. Strong written and verbal communication skills for collaboration with SOC analysts and stakeholder briefings. Preferred Qualifications Hands-on experience deploying or administering Splunk premium apps (Enterprise Security, ITSI, or Splunk SOAR) in production environments. Expertise with infrastructure as code and automation tools (e.g., Ansible playbooks, GitLab CI/CD) to provision and upgrade Splunk components. Experience operating under U.S. federal compliance frameworks such as NIST 800-53 or DISA STIG. Splunk Cloud Admin, Splunk Enterprise Security Admin, or other advanced Splunk certifications. Bachelor’s degree in Computer Science, Cybersecurity, or related field (or equivalent practical experience). Job Types: Full-time, Contract, Permanent Compensation $85+ hr C2C $150k+ W-2 with health, PTO, 401(k), HSA Work Location: Hybrid with one day on site. Candidate can pick Monday, Wednesday, or Friday at client site near MoMa Metro in Washington DC. Easily accessible on red line dc metro. Job Types: Full-time, Contract Pay: From $85.00 per hour Benefits: 401(k) Dental insurance Health insurance Health savings account Paid time off Professional development assistance Vision insurance Application Question(s): Do you have an Active U.S. Security Clearance? Experience: Splunk: 5 years (Required) Cybersecurity: 4 years (Required) License/Certification: Splunk Architect or Splunk Certified Core Consultant (Preferred) Ability to Commute: Washington, DC 20002 (Required) Work Location: Hybrid remote in Washington, DC 20002