Genesis10 is currently seeking a Splunk Platform Engineer for a contract position with a Global Financial Institution located in Charlotte, NC or Plano, TX. This is a 12+ month contract opportunity. The engineer will act as a trusted platform owner, ensuring Splunk availability, scalability, and reliability while partnering closely with Information Security, SOC, architecture, engineering, and operations teams. This role is central to maintaining the stability and performance of a highly distributed Splunk Enterprise and Splunk Cloud environment.
Responsibilities: - Own end-to-end production support for a highly distributed Splunk Enterprise and Splunk Cloud environment, including search head clusters, indexer clusters, deployers, deployment servers, and forwarders
- Ensure high availability, performance, and resiliency of the Splunk platform supporting security and operational use cases
- Lead incident response, troubleshooting, root cause analysis (RCA), and service restoration for Splunk and Cribl platforms
- Proactively identify risks, capacity constraints, and performance bottlenecks; implement preventive and tuning measures
- Serve as a key technical enabler for Information Security and SOC teams, ensuring timely, accurate, and reliable ingestion of security logs
- Onboard and normalize new data sources, supporting CIM compliance, field normalization, and SIEM best practices
- Tune ingestion pipelines using props.conf and transforms.conf, index-time and search-time optimizations
- Build and support dashboards, searches, and alerts that enable threat detection, investigations, and reporting
- Administer and support the Cribl environment for data routing, filtering, enrichment, and cost optimization
- Ensure data integrity, reliability, and performance across Splunk ingestion pipelines
- Collaborate with architecture teams on data flow strategies and onboarding standards
- Develop and maintain runbooks, SOPs, installation guides, and operational documentation
- Adhere to change management, incident management, and SLA commitments using ITSM tools
Requirements: - 5+ years of hands-on experience administering large-scale Splunk Enterprise or Splunk Cloud environments
- Strong expertise in:
- Indexer clustering and search head clustering
- Universal and heavy forwarder architectures
- SmartStore / S3-compatible object storage
- SPL, search optimization, summary indexing, data model acceleration
- Deep experience with security log ingestion and SIEM use cases
- Proven ability to lead production incidents, perform RCA, and drive preventive solutions
- Strong Linux administration skills and experience managing Splunk configuration and apps
- Experience working in 24x7 production environments with high availability expectations
- Excellent written and verbal communication skills, with the ability to engage senior technical and business stakeholders
Desired skills: - A production owner's mindset and deep technical credibility in Splunk and data pipelines
- Ability to operate calmly and decisively during high-severity security and platform incidents
- Strong partnership with Information Security, where Splunk availability and data quality are mission-critical to protecting the Global Financial Institution
- Splunk certifications such as Enterprise Admin or Enterprise Architect
- Experience with Splunk Enterprise Security (ES) and SOAR (Phantom or equivalent)
- Exposure to cloud logging and security architectures (AWS, Azure, Google Cloud Platform)
- Knowledge of Red Hat Enterprise Linux and Windows Server administration
- Experience with monitoring, APM, and event management tools
- Strong understanding of security, network, system, and database operations
- Ability to balance multiple priorities in a fast-paced, enterprise production environment
Pay range: $63.68 - $71.68 per hour
Only candidates available and ready to work directly as Genesis10 employees will be considered for this position. If you have the described qualifications and are interested in this exciting opportunity, please apply! Ranked a Top Staffing Firm in the U.S. by Staffing Industry Analysts for six consecutive years, Genesis10 puts thousands of consultants and employees to work across the United States every year in contract, contract-for-hire, and permanent placement roles. With more than 300 active clients, Genesis10 provides access to many of the Fortune 100 firms and a variety of mid-market organizations across the full spectrum of industry verticals.
For contract roles, Genesis10 offers the benefits listed below. If this is a perm-placement opportunity, our recruiter can talk you through the unique benefits offered for that particular client. Benefits of Working with Genesis10: - Access to hundreds of clients, most who have been working with Genesis10 for 5-20+ years.
- The opportunity to have a career-home in Genesis10; many of our consultants have been working exclusively with Genesis10 for years.
- Access to an experienced, caring recruiting team (more than 7 years of experience, on average.)
- Behavioral Health Platform
- Medical, Dental, Vision
- Health Savings Account
- Voluntary Hospital Indemnity (Critical Illness & Accident)
- Voluntary Term Life Insurance
- 401K
- Sick Pay (for applicable states/municipalities)
- Commuter Benefits (Dallas, NYC, SF, and Illinois)
For multiple years running, Genesis10 has been recognized as a Top Staffing Firm in the U.S., as a Best Company for Work-Life Balance, as a Best Company for Career Growth, for Diversity, and for Leadership, amongst others. To learn more and to view all our available career opportunities, please visit us at our website.
Genesis10 is an Equal Opportunity Employer. Candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
Never miss an opportunity! Create an alert based on the job you applied for.