SIEM/Splunk Specialist

Implementation & Deployment Lead the end-to-end rollout of Splunk Enterprise or Splunk Cloud Platform across the organization Design and implement scalable Splunk architectures (indexers, search heads, forwarders, clustering) Integrate Splunk with other Cisco platforms: Develop data onboarding strategies (logs, metrics, events, network telemetry) Operations & Support Provide day-to-day administration of Splunk environments Monitor system health, performance, and data ingestion pipelines Troubleshoot ingestion issues, search performance, and infrastructure bottlenecks Manage upgrades, patches, and system tuning Ensure high availability, disaster recovery, and backup strategies, The Dedicated Resource will report to 701 W. 51st Street, Austin, TX 78751. Normal business hours are [8:00 AM to 5:00 PM Monday through Friday except for holidays observed by the State of Texas].

5 10+ years of experience in Splunk engineering/administration Hands-on experience with: Splunk architecture and distributed deployments Data onboarding and parsing Search Processing Language (SPL) Experience with Cisco ecosystem integrations Strong knowledge of: Linux/Unix systems Networking (TCP/IP, DNS, firewalls) Security frameworks (NIST, MITRE ATT&CK) Experience supporting large-scale enterprise environments