> Markdown version of [/jobs/ext/2167311-splunk-architect](https://www.wearedevelopers.com/jobs/ext/2167311-splunk-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Splunk Architect - **Company:** Purple Drive Technologies LLC - **Location:** Charlotte, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Amazon Web Services, Data Analysis, User Authentication, Microsoft Azure, Unix, Cloud Computing, Cloud Engineering, Cyber Security, Databases, Continuous Integration, Linux, DevOps, HP Systems Insight Manager, Information Technology Operations, Networking Hardware, Python (Programming Language), Parsing, Role-Based Access Control, Cloud Services, Ansible, Security Information and Event Management, Data Streaming, Systems Integration, Google Cloud, Enterprise Software Applications, Cloud Platform System, Data Ingestion, Database Optimization, Indexer, Kubernetes, Restful APIs, Terraform, Splunk, Microservices - **Published:** August 21, 2026 - **Apply:** https://www.dice.com/job-detail/e1e9d066-fc5b-43dc-a52e-17fa11442533 ## About the Role * 10+ years of experience in IT with strong hands-on Splunk experience. * Strong experience designing enterprise Splunk architecture and deployment models. * Expertise in Splunk Enterprise, Splunk Cloud, Splunk Enterprise Security (ES). * Strong proficiency in SPL, dashboards, reports, alerts, and data models. * Experience with Splunk Indexers, Search Heads, Heavy Forwarders, Universal Forwarders, and Cluster Management. * Experience with data onboarding, parsing, field extraction, CIM, and source types. * Strong knowledge of Linux/Unix environments. * Experience with Python, REST APIs, and automation. * Experience integrating Splunk with SIEM, cybersecurity, cloud, and monitoring platforms. * Knowledge of AWS/Azure/Google Cloud Platform and cloud-native architectures. * Strong understanding of networking, security, authentication, and enterprise infrastructure. * Preferred Qualifications * Splunk certifications such as Splunk Enterprise Certified Architect, Splunk Enterprise Security Certified Admin, or Splunk Core Certified Power User. * Experience with SOAR, ITSI, Observability, or OpenTelemetry. * Experience with Kubernetes, containers, and microservices. * Experience with DevOps, CI/CD, Terraform, or Ansible. * Strong communication, stakeholder-management, and technical leadership skills. ## Description We are seeking an experienced Splunk Architect to design, implement, and lead enterprise-scale Splunk solutions for security monitoring, observability, log management, and analytics. The ideal candidate will have strong expertise in Splunk architecture, data onboarding, search optimization, dashboards, integrations, and large-scale deployments., * Design and architect highly scalable, secure, and resilient Splunk Enterprise / Splunk Cloud environments. * Define Splunk architecture, deployment models, data flows, indexing strategies, and retention policies. * Lead implementation and migration of enterprise Splunk platforms. * Develop and optimize SPL queries, dashboards, reports, alerts, and data models. * Integrate Splunk with enterprise applications, cloud platforms, databases, APIs, and security tools. * Design solutions for SIEM, security monitoring, IT operations, application monitoring, and observability. * Implement and manage data ingestion from servers, applications, network devices, cloud services, and security platforms. * Optimize indexing, search performance, storage, licensing, and platform capacity. * Establish Splunk security, RBAC, governance, and operational best practices. * Provide technical leadership, architecture documentation, and design recommendations. * Troubleshoot complex Splunk performance, ingestion, and search-related issues. * Collaborate with security, infrastructure, application, cloud, and DevOps teams. ## Related Videos - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [WeAreDevelopers LIVE - Node and Package Security](https://www.wearedevelopers.com/videos/2138-wearedevelopers-live-node-and-package-security) - [Blueprints for Success: Steering a Global Data & AI Architecture](https://www.wearedevelopers.com/videos/1577-blueprints-for-success-steering-a-global-data-ai-architecture) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Next Level Enterprise Architecture: Modular, Flexible, Scalable, Multichannel and AI-Ready?](https://www.wearedevelopers.com/videos/1017-next-level-enterprise-architecture-modular-flexible-scalable-multichannel-and-ai-ready) ## Related Articles - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Making Data Warehouses Fast: A Developer’s Story](https://www.wearedevelopers.com/magazine/107-making-data-warehouses-fast-a-developer-s-story) - [Dev Digest 162: AI careers, MCP, AWS best practices & floppy sweaters](https://www.wearedevelopers.com/magazine/571-dev-digest-162-ai-careers-mcp-aws-best-practices-floppy-sweaters) - [Top Big Data Technologies That You Need to Know](https://www.wearedevelopers.com/magazine/108-top-big-data-technologies-that-you-need-to-know)