Splunk Engineer

Splunk Engineer

Location: Auburn, AL

Onsite Flexibility: Remote

Contract Details

• Position Type: Contract
• Contract Duration: 6 months
• Pay Rate: $85.00 $100.00 / Hour (USD)
• Work Authorization: Applicants must be authorized to work for ANY employer in the U.S. We are unable to sponsor or take over sponsorship of an employment Visa at this time.

Job Summary

This role focuses on designing, implementing, and optimizing Splunk Enterprise and Splunk Cloud architectures including indexers, search heads, forwarders, and deployment servers to support security monitoring, log management, and operational analytics. This role can be 100% remote or onsite; there is no preference.

Key Responsibilities

• Design, implement, and optimize Splunk Enterprise and Splunk Cloud architectures including indexers, search heads, forwarders, and deployment servers to support security monitoring, log management, and operational analytics.
• Develop and maintain Splunk dashboards, alerts, reports, searches, and data models aligned to partner and mission requirements.
• Integrate data sources into Splunk, including infrastructure, cloud, application, and security technologies.
• Build and maintain pipelines to parse, normalize, enrich, and route data to Splunk.
• Support use case development for threat detection, incident response, compliance monitoring, and operational visibility.
• Create and maintain architecture diagrams, technical documentation, implementation standards, and administration procedures.
• Administer role-based access controls and monitor the health, performance, and availability of the Splunk environment.
• Distill complex technical concepts into accessible explanations for analysts, leadership, and non-technical partners.
• Utilize strong communication and presentation skills.
• Recognize, analyze, and solve a variety of problems.

Required Skills

• Experience in Splunk architecture, including indexers, search heads, forwarders, and deployment server.
• Experience developing Splunk dashboards, reports, alerts, tuning alerts, and saved searches.
• Experience onboarding and normalizing log sources from infrastructure, applications, cloud platforms, and security tools.
• Experience building pipelines to parse, normalize, enrich, and route data to Splunk.
• Proficiency with Splunk Search Processing Language (SPL), data models, and role-based access controls.
• Knowledge of Security Information and Event Management (SIEM) concepts, security monitoring, and threat detection use cases.
• Networking fundamentals, including Transmission Control Protocol/User Datagram Protocol (TCP/UDP), Transport Layer Security (TLS), syslog transport, firewall ports, and common transport issues, as well as system log analysis.
• Experience in Linux and Windows administration.

Preferred Skills

• Advanced Splunk certifications, such as Splunk Certified Architect or Splunk Enterprise Security Certified Admin.
• Experience with Splunk Enterprise Security or Security Orchestration, Automation, and Response (SOAR) platforms.
• Scripting experience (Python, PowerShell, or Bash) for automation and data onboarding.
• Experience supporting SOC operations in government, higher education, or critical infrastructure environments.

Education Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or other related field required.
• Must hold one or more of the following certifications: Splunk Core Certified Power User, Splunk Enterprise Certified Admin, or a Splunk Enterprise Security certification.

Required Experience

• 5 years of experience implementing, managing, and configuring Splunk Enterprise or Splunk Cloud.

Important Notes

• A HireRight background check is required.
• Interview format: Video only.

Benefits

• Medical, Vision, and Dental Insurance Plans
• 401k Retirement Fund

About GTT

GTT is a minority-owned staffing firm and a subsidiary of Chenega Corporation, a Native American-owned company in Alaska. We highly value diverse and inclusive workplaces and support Fortune 500 organizations across banking, financial services, technology, life sciences, biotech, utilities, and retail sectors throughout the U.S. and Canada.

Job Number: 26-13348 Industry: Engineering

#LI-Remote