Splunk Admin

Description:
Our client, an industry leader in banking and financial services, has an excellent opportunity for a Splunk Admin to work on a 7+month renewable contract. Work will be 100% remote on EST. The Splunk Admin will design, build, and implement standardized data onboarding pipelines and configurations to bring applications into Splunk Enterprise and Splunk Enterprise Security platforms over a 6-7 month engagement. Success demands both technical depth and the ability to work at a rapid pace while maintaining high quality and consistency.

We can facilitate w2 and corp-to-corp consultants. For our w2 consultants, we offer a great benefits package that includes Medical, Dental, and Vision benefits, 401k with company matching, and life insurance.

Rate: $60 - $80 / hr. w2

Responsibilities:

• Design and implement standardized data onboarding procedures and configurations for applications; establish repeatable patterns and templates
• Conduct technical onboarding of applications into Splunk Cloud: configure data inputs, create parsing rules, establish field extractions, and build data models
• Map application data and security events to Splunk Common Information Model (CIM); identify and document relevant SIEM use cases
• Build and optimize data models, lookups, and knowledge objects to support reporting, alerting, alerting rule creation, and compliance requirements
• Design and implement automated onboarding pipelines using Git-based configuration management, Ansible playbooks, and CI/CD workflows to reduce manual effort and improve consistency
• Establish and enforce standardized tagging conventions, naming standards, and data organization principles across all onboarded applications
• Collaborate with Business Analysts to translate requirements into technical specifications; support requirements clarification and feasibility assessment
• Work alongside 3 peer Splunk Data Admins to execute onboarding at scale; establish code review and peer collaboration practices to maintain quality
• Partner with client's existing team to establish best practices; prepare them to sustain and evolve the platform post-engagement
• Provide consultation to Splunk users and stakeholder teams on best practices, use cases, and guidance for creating and maintaining knowledge objects
• Deliver training and knowledge-sharing sessions to Enterprise Monitoring Team and partner IT teams on standardized onboarding procedures and platform capabilities
• Integrate Splunk with complementary monitoring and infrastructure platforms (Dynatrace, SolarWinds) to ensure cohesive observability workflows
• Serve as primary technical point of contact for complex Splunk platform issues during the engagement period; support incident response as needed in collaboration with client's operations team
• Monitor Splunk platform health and performance; proactively identify and resolve bottlenecks, optimization opportunities, and infrastructure constraints
• Correlate and reconcile disparate events and data sources from multiple monitoring platforms to ensure consistent, reliable alerting and reporting
• Troubleshoot and resolve complex data integration challenges; identify data quality issues, reconciliation gaps, and root causes
• Document technical architecture, configuration decisions, onboarding procedures, and lessons learned to enable knowledge transfer and future maintenance
• Participate in ongoing optimization and performance tuning as volume and complexity increase throughout the engagement

Experience Requirements:

• Minimum 3+ years of hands-on Splunk Enterprise administration and implementation experience
• Minimum 5+ years of infrastructure, platform engineering, systems administration, or related technical domain experience
• Splunk Certified Admin (SCA), Splunk Certified Power User (SCPU) and Splunk ES certification or coursework completed required; additional Splunk certifications (e.g., SCS, Developer) preferred

Education Requirements:

• Bachelor's degree in Computer Science, Information Technology, Engineering, or related field (or equivalent professional experience)

Skills, experience, and other compensable factors will be considered when determining pay rate. The pay range provided in this posting reflects a W2 hourly rate; other employment options may be available that may result in pay outside of the provided range.

W2 employees of Eliassen Group who are regularly scheduled to work 30 or more hours per week are eligible for the following benefits: medical (choice of 3 plans), dental, vision, pre-tax accounts, other voluntary benefits including life and disability insurance, 401(k) with match, and sick time if required by law in the worked-in state/locality.
Please be advised- If anyone reaches out to you about an open position connected with Eliassen Group, please confirm that they have an Eliassen.com email address and never provide personal or financial information to anyone who is not clearly associated with Eliassen Group. If you have any indication of fraudulent activity, please contact

About Eliassen Group:

Eliassen Group is a leading strategic consulting company for human-powered solutions. For over 30 years, Eliassen has helped thousands of companies reach further and achieve more with their technology solutions, financial, risk & compliance, and advisory solutions, and clinical solutions. With offices from coast to coast and throughout Europe, Eliassen provides a local community presence, balanced with international reach. Eliassen Group strives to positively impact the lives of their employees, clients, consultants, and the communities in which they operate.

Eliassen Group is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.

Don't miss out on our referral program! If we hire a candidate that you refer us to then you can be eligible for a $1,000 referral check!