> Markdown version of [/jobs/ext/1227706-splunk-engineer-architect](https://www.wearedevelopers.com/jobs/ext/1227706-splunk-engineer-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Splunk Engineer/Architect

- **Company:** Zachary Piper
- **Location:** Morrisville, NC, United States
- **Experience:** Expert
- **Salary:** $140,000.0 - $180,000.0
- **Contract:** Permanent contract
- **Skills:** Cluster Analysis, Parsing, Performance Tuning, Security Information and Event Management, Data Ingestion, Mitre Att&ck, Indexer, Backend, SC Clearance, Splunk
- **Published:** July 10, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9023218/splunk-engineerarchitect

## About the Role

* 5+ years of hands-on Splunk Engineering/Architecture experience (backend focus, not dashboarding).
 * Strong expertise with Splunk Enterprise and Splunk Enterprise Security (ES) in large-scale environments.
 * Deep understanding of data ingestion, indexing, clustering (indexer/search head), and search optimization.
 * Experience supporting Splunk within a SOC and contributing to SIEM/security monitoring strategies.

## Description

Piper Companies is seeking a Splunk Engineer / Architect to support a leading organization in the cybersecurity and enterprise technology industry. The Splunk Engineer / Architect will play a critical role in designing, implementing, and optimizing enterprise-scale Splunk environments within a SOC, with a strong focus on backend engineering and architectural design rather than dashboarding or end-user analytics. The Splunk Engineer/Architect is a long term contract opportunity, requires an active Secret Clearance and requires you to work onsite 5 days per week in RTP, NC.

 * Design and deploy scalable, highly available Splunk architectures across on-prem, cloud, and hybrid environments.
 * Lead Splunk engineering efforts including installation, configuration, upgrades, and ongoing platform maintenance (indexers, search heads, forwarders, clustering).
 * Develop and execute data ingestion strategies, including onboarding, normalization, parsing, and performance optimization.
 * Establish governance, platform standards, and best practices to ensure long-term scalability and reliability.
 * Support SOC operations by building and tuning SIEM use cases, correlation searches, and alerts aligned with MITRE ATT&CK.
 * Collaborate with cybersecurity and infrastructure teams to enhance threat detection, monitoring, and incident response capabilities.


## Related Videos

- [Optimizing Discovery: PostgreSQL's Role in Transforming GetYourGuide's Search](https://www.wearedevelopers.com/videos/1647-optimizing-discovery-postgresql-s-role-in-transforming-getyourguide-s-search)
- [How I saved 200K/yr in direct costs writing 0 code lines in K8s](https://www.wearedevelopers.com/videos/1055-how-i-saved-200k-yr-in-direct-costs-writing-0-code-lines-in-k8s)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json)
- [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem)
- [Dynamic Entities in .NET: Building Low-Code Systems on Top of Entity Framework Core](https://www.wearedevelopers.com/videos/100218-dynamic-entities-in-net-building-low-code-systems-on-top-of-entity-framework-core)

## Related Articles

- [Dev Digest 162: AI careers, MCP, AWS best practices & floppy sweaters](https://www.wearedevelopers.com/magazine/571-dev-digest-162-ai-careers-mcp-aws-best-practices-floppy-sweaters)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 166: Sycophancy, Zip bombs and AI Native Development](https://www.wearedevelopers.com/magazine/585-dev-digest-166-sycophancy-zip-bombs-and-ai-native-development)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [Software Developer Salary in Switzerland [2023]](https://www.wearedevelopers.com/magazine/215-software-developer-salary-in-switzerland-2023)