Splunk Developer, DevOps Engineer

Summary

Join our team as a Splunk/DevOps Engineer for a long-term, fully remote contract (EST timezone). You will manage and maintain a large-scale Splunk deployment in AWS for a national government integrator supporting a government agency. Responsibilities include integrating, configuring, and optimizing Splunk, collaborating with development and operations teams, automating deployment processes, implementing security best practices, and troubleshooting issues. This role requires extensive experience with Splunk, AWS, and DevOps practices. The ideal candidate will possess strong problem-solving skills and excellent communication abilities.

Requirements

• 8+ years of experience as a Splunk Security Engineer or DevOps Engineer in a large, distributed environment
• US Citizenship or Green Card holder
• Proven experience operating and managing Splunk in cloud (AWS) and/or hybrid environments
• Strong knowledge of AWS infrastructure and services, with hands-on experience in platform optimization
• Proficiency in Linux, shell scripting, and GitHub for code management
• Hands-on experience with Terraform, CloudFormation, or similar automation tools
• Familiarity with CI/CD tools
• Experience with containerization (Docker, Kubernetes) and working within cloud environments (AWS, Azure, GCP)
• Strong problem-solving and troubleshooting skills, particularly in multi-tenant enterprise environments
• Expertise in Splunk Search Processing Language (SPL), dashboard creation, and complex query development
• Excellent communication and collaboration skills, with the ability to work under pressure in fast-paced environments

Responsibilities

• Manage and maintain a large-scale Splunk deployment hosted in AWS
• Integrate, configure, and optimize Splunk for log analysis, monitoring, and troubleshooting
• Collaborate with development and operations teams to ensure system performance, scalability, and security
• Automate and optimize deployment processes, monitoring, and infrastructure using Infrastructure as Code (IaC) tools such as Terraform, Ansible, or CloudFormation
• Implement security best practices and leverage Splunk Enterprise Security for system monitoring
• Troubleshoot production issues and resolve system/application errors within the Splunk ecosystem
• Set up and manage SC4S (Splunk Connect for Syslog) for log collection
• Execute standard Splunk onboarding procedures, ensuring proper log ingestion, parsing, and adherence to the Splunk Common Information Model (CIM)
• Implement and manage Splunk apps and add-ons for specialized use cases and data visualizations

Preferred Qualifications

• Experience with Splunk HTTP Event Collector (HEC), syslog, log management and security monitoring
• Hands-on expertise with AWS Cloud infrastructure governance and performance optimization
• Strong scripting skills in Python, Bash, or other equivalent languages
• Splunk Enterprise Certified Architect or equivalent
• AWS Certified Solutions Architect or DevOps Engineer