Splunk Enterprise Architect

Remote • Posted 15 hours ago • Updated 15 hours ago

Contract Independent

Contract Corp To Corp

Contract W2

Remote

Depends on Experience

Fitment

Dice Job Match Score™

🎯 Assessing qualifications...

Job Details

Skills

Splunk

Summary

Role Overview

We are seeking a Splunk Enterprise Architect to design, implement, and optimize scalable Splunk environments across the enterprise. This role is responsible for defining architecture standards, ensuring platform reliability and security, and guiding teams on best practices for data ingestion, search performance, and advanced analytics. The ideal candidate combines deep Splunk expertise with strong system architecture and stakeholder leadership skills.

Key Responsibilities

Design and own end-to-end Splunk Enterprise architecture, including indexers, search heads, forwarders, clustering, and deployment servers
Define architecture standards, reference designs, and best practices for Splunk implementations
Lead Splunk platform deployments, upgrades, and migrations (on-prem, cloud, or hybrid)
Optimize performance, scalability, data retention, and licensing usage
Architect secure data ingestion pipelines across diverse sources (logs, metrics, events, APIs)
Implement high availability, disaster recovery, and capacity planning strategies
Collaborate with security, IT operations, DevOps, and application teams to meet business requirements
Guide development of dashboards, alerts, correlation searches, and data models
Ensure compliance with security, governance, and regulatory requirements
Act as a technical advisor and escalation point for complex Splunk issues
Mentor Splunk engineers and analysts; provide technical leadership and knowledge sharing

Required Skills & Experience

10+ years of experience in IT architecture, observability, or security platforms
5+ years of hands-on experience with Splunk Enterprise / Splunk Cloud
Strong understanding of Splunk core components:
Indexers, Search Heads, Forwarders
Clustering (Indexer & SHC)
Deployment Server, License Master
Expertise in SPL (Search Processing Language)
Experience with large-scale, distributed Splunk environments
Strong knowledge of Linux, networking, and system performance tuning
Experience integrating Splunk with SIEM, SOAR, cloud platforms (AWS, Azure, Google Cloud Platform), and third-party tools
Ability to translate business requirements into technical architecture
Excellent troubleshooting, documentation, and communication skills

Preferred Qualifications

Splunk Certifications (Architect, Admin, Power User)
Experience with Splunk ES, ITSI, Observability, or SOAR
Exposure to DevOps tools (CI/CD, Terraform, Ansible, Kubernetes)
Cloud-native architecture and cost optimization experience
Experience in regulated or large enterprise environments

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.

Dice Id: 10457941
Position Id: 8872992
Posted 15 hours ago

Create job alert

Never miss an opportunity! Create an alert based on the job you applied for.

Splunk Enterprise Architect

Dice Job Match Score™

Job Details

Skills

Summary

Similar Jobs