> Markdown version of [/jobs/ext/4208300-splunk-engineer](https://www.wearedevelopers.com/jobs/ext/4208300-splunk-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Splunk Engineer

- **Company:** Revolutional, LLC
- **Location:** Washington, DC, United States (Remote available)
- **Experience:** Experienced
- **Salary:** $120,000 - $160,000
- **Contract:** Permanent contract
- **Skills:** Bash Shell, Cluster Analysis, Cyber Security, Information Systems, Data Integration, Python (Programming Language), Data Streaming, System Testing, Systems Integration, Scripting, Macros, Data Ingestion, Information Technology, Splunk
- **Published:** October 20, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=19874c3a47664031

## About the Role

* Bachelor's degree in Cybersecurity, Computer Science, Information Systems, Engineering, or a related field and 4+ years of relevant professional experience; three (3) years of additional relevant experience may be substituted in lieu of a degree.
 * Hands-on experience administering distributed Splunk Enterprise deployments.
 * Experience with index and search head clustering, forwarders, and data onboarding.
 * Proficiency with SPL, dashboards, and knowledge objects.
 * Scripting skills (Python, Bash).

Desired

 * Splunk Certified Admin or Architect.
 * Experience with Splunk Enterprise Security or SOAR.
 * Experience with cloud data sources.
 * Active Top Secret clearance.

## Description

We are seeking a Splunk Engineer who supports the Splunk environment for a 24x7x365 Security Operations Center (SOC) supporting a large federal agency, including distributed deployment architecture, index clusters, search head clusters, dashboards, and data integration.

The successful candidate will:

 * Keep the Splunk environment healthy and performant.
 * Deliver useful dashboards and searches for analysts.
 * Integrate new data sources reliably.
 * Document configurations to standard.

Responsibilities:

 * Manage distributed Splunk deployment architecture, index clusters, and search head clusters.
 * Support systems integration of hardware, software, operating systems, and communications for Splunk data.
 * Develop dashboards, reports, alerts, and complex custom SPL queries.
 * Create and manage Splunk knowledge objects (field extractions, lookups, macros, data models).
 * Normalize disparate data sets and integrate multiple data streams into near real-time dashboards.
 * Configure and maintain indexers, forwarders, and data inputs.
 * Prepare specifications, code, system tests, and documentation in accordance with standards.
 * Support installation of physical and software components.
 * Tune searches and correlation rules to improve performance and detection quality.