Splunk Platform Engineer (Charlotte, Plano, or Pennington)

• Own end-to-end production support for a highly distributed Splunk Enterprise and Splunk Cloud environment, including search head clusters, indexer clusters, deployers, deployment servers, and forwarders.
• Ensure high availability, performance, and resiliency of the Splunk platform supporting security and operational use cases.
• Lead incident response, troubleshooting, root cause analysis (RCA), and service restoration for Splunk and Cribl platforms.
• Proactively identify risks, capacity constraints, and performance bottlenecks; implement preventive and tuning measures.
• Enable Information Security and SOC teams by ensuring timely, accurate, and reliable ingestion of security logs and SIEM readiness., * Work as a trusted platform owner, directly improving Splunk availability, scalability, and reliability for mission-critical security use cases.
• Partner closely with Information Security, SOC, architecture, engineering, and operations teams to strengthen SIEM enablement and data quality.
• Build and support dashboards, searches, and alerts that enable threat detection, investigations, and reporting.
• Administer and optimize Cribl data pipeline routing, filtering, enrichment, and cost optimization while maintaining data integrity and performance.
• Operate in a 24x7 production environment where your calm, decisive execution during high-severity incidents makes a measurable impact.

Upon completion of waiting period consultants are eligible for:

• Medical and Prescription Drug Plans
• Dental Plan
• Vision Plan
• Health Savings Account
• Health Flexible Spending Account
• Dependent Care Flexible Spending Account
• Supplemental Life Insurance
• Short Term and Long Term Disability Insurance
• Business Travel Insurance
• 401(k), Plus Match
• Weekly Pay

• 5+ years of hands-on experience administering large-scale Splunk Enterprise or Splunk Cloud environments.
• Strong expertise in indexer clustering and search head clustering, Universal and heavy forwarder architectures, and SmartStore/S3-compatible object storage.
• Deep experience with security log ingestion and SIEM use cases, including SPL and search optimization, summary indexing, and data model acceleration.
• Proven ability to lead production incidents, perform RCA, and drive preventive solutions.
• Strong Linux administration skills and experience managing Splunk configuration and apps, including props.conf and transforms.conf tuning.

About ManpowerGroup, Parent Company of: Manpower, Experis, Talent Solutions, and Jefferson Wells.

ManpowerGroup (NYSE: MAN), the leading global workforce solutions company, helps organizations transform in a fast-changing world of work by sourcing, assessing, developing, and managing the talent that enables them to win. We develop innovative solutions for hundreds of thousands of organizations every year, providing them with skilled talent while finding meaningful, sustainable employment for millions of people across a wide range of industries and skills. Our expert family of brands - Manpower, Experis, Talent Solutions, and Jefferson Wells - creates substantial value for candidates and clients across more than 75 countries and territories and has done so for over 70 years. We are recognized consistently for our diversity - as a best place to work for Women, Inclusion, Equality and Disability and in 2023 ManpowerGroup was named one of the World’s Most Ethical Companies for the 14th year - all confirming our position as the brand of choice for in-demand talent.

ManpowerGroup is committed to providing equal employment opportunities in a professional, high quality work environment. It is the policy of ManpowerGroup and all of its subsidiaries to recruit, train, promote, transfer, pay and take all employment actions without regard to an employee’s race, color, national origin, ancestry, sex, sexual orientation, gender identity, genetic information, religion, age, disability, protected veteran status, or any other basis protected by applicable law.