> Markdown version of [/jobs/ext/1250333-siem-platform-engineer-dod-ts-clearance](https://www.wearedevelopers.com/jobs/ext/1250333-siem-platform-engineer-dod-ts-clearance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # SIEM Platform Engineer (DoD TS Clearance) - **Company:** Martin Incorporated - **Location:** Washington, DC, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Computing Platforms, Configuration Management, Cyber Security, Data Retention, Disaster Recovery, Monitoring of Systems, Intrusion Detection and Prevention, Performance Tuning, Role-Based Access Control, Security Information and Event Management, Data Storage Management, Cloud Platform System, Data Ingestion, System Availability, Indexer, Storage Technologies, Information Technology, Performance Monitor, Splunk - **Published:** July 12, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=ad2b01917cf74ef9 ## About the Role * US Citizen with an active Top Secret Security Clearance. * Bachelor's degree in Computer Science or a related field plus 6 years of related experience. * Proven experience designing, deploying, and administering distributed and clustered Splunk environments, preferably within government or enterprise settings. * Strong understanding of Splunk architecture, indexer/search head clustering, forwarder management, and licensing. * Experience with capacity planning, performance tuning, and platform upgrades. * Familiarity with security standards and regulations (NIST, FISMA, etc.) applicable to platform operation and accreditation. * Splunk Enterprise Certified Admin or Architect certification preferred. * Excellent problem-solving skills and the ability to diagnose and resolve complex technical issues. * Strong written and verbal communication skills. PHYSICAL REQUIREMENTS & ENVIRONMENTAL CONDITIONS * Inside office environment. * Working on a computer for long periods of time. * May involve long period of sitting at a desk. * The work environment is fast-paced and sometimes involves extreme deadline pressures. ## Description The SIEM responsible for the architecture, deployment, and ongoing health of the Splunk platform that underpins security operations across government agencies. This role owns the underlying infrastructure - indexers, search heads, forwarders, and clustering - and ensures the environment is performant, resilient, secure, and scalable. The Platform Engineer partners with Data and Detection Engineers, IT teams, and stakeholders to deliver a stable foundation on which data ingestion and threat detection depend., * Platform Architecture and Deployment + Design, deploy, and maintain Splunk environments, including indexer clusters, search head clusters, and forwarder tiers, to support enterprise-scale data collection and analysis. + Architect distributed and clustered deployments for high availability and disaster recovery. * Configuration and Optimization + Optimize Splunk configurations to ensure efficient data storage, indexing, retrieval, and search performance. + Manage index and storage design, data retention policies, and licensing to balance performance and cost. * Capacity Planning and Scaling + Monitor growth trends and forecast capacity needs across compute, storage, and licensing. + Scale the environment proactively to meet increasing data volumes and user demand. * Lifecycle Management + Plan and execute Splunk version upgrades, patching, and platform migrations with minimal disruption. + Manage app and add-on deployment across the environment using deployment servers and configuration management. * Performance Monitoring and Troubleshooting + Monitor system performance and troubleshoot issues related to indexing, search performance, and resource utilization. + Implement optimizations to enhance the platform's efficiency, stability, and responsiveness. * Platform Security and Compliance + Implement access controls, role-based access (RBAC), hardening, and best practices to protect the platform and ensure compliance with relevant regulations and standards. + Support audit, accreditation, and continuous monitoring requirements for the environment. * Training and Documentation + Provide guidance to team members on Splunk platform administration and best practices. + Create and maintain documentation for platform architecture, configurations, and operational procedures. ## Related Videos - [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Optimizing Discovery: PostgreSQL's Role in Transforming GetYourGuide's Search](https://www.wearedevelopers.com/videos/1647-optimizing-discovery-postgresql-s-role-in-transforming-getyourguide-s-search) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Dynamic Entities in .NET: Building Low-Code Systems on Top of Entity Framework Core](https://www.wearedevelopers.com/videos/100218-dynamic-entities-in-net-building-low-code-systems-on-top-of-entity-framework-core) ## Related Articles - [Dev Digest 162: AI careers, MCP, AWS best practices & floppy sweaters](https://www.wearedevelopers.com/magazine/571-dev-digest-162-ai-careers-mcp-aws-best-practices-floppy-sweaters) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Dev Digest 164: AI Agents, AI Blindspots and MCP security problems](https://www.wearedevelopers.com/magazine/578-dev-digest-164-ai-agents-ai-blindspots-and-mcp-security-problems)