Senior Splunk Engineer

We are seeking a Senior Splunk Engineer to lead the architecture, implementation, and maintenance of our Splunk environments. In this role, you will be responsible for designing and developing scalable, high-performance Splunk solutions, innovating on the platform's capabilities, and ensuring its reliability and security. You will serve as a subject matter expert, providing technical guidance, mentoring junior engineers, and collaborating with various teams to meet the company's data and security objectives. Assist with transition from M-21-31 to M-26-14 compliance, including CISA framework analysis and crafting IHS’s internal compliance policies, processes, and procedures
Responsibilities:

-
Design & Development: Architect and implement scalable, high-performance Splunk environments, including data ingestion pipelines, dashboards, alerts, and reports.

-
Solution Innovation: Research, prototype, and develop innovative Splunk-based solutions to improve platform capabilities or deliver new features for analytics, security, or DevOps use cases.

-
Infrastructure Management: Maintain and optimize the Splunk infrastructure, including indexing, search performance, and data retention strategies to ensure system health and efficiency.

-
Integration & Automation: Integrate Splunk with other critical systems (e.g., SIEM, DevOps tools, databases) and automate repetitive tasks using scripting and CI/CD tools.

-
Support & Troubleshooting: Act as a final escalation point to resolve complex operational issues, troubleshoot performance bottlenecks, and guarantee high system reliability and availability.

-
Documentation & Knowledge Sharing: Create comprehensive documentation for designs, processes, and solutions. Actively mentor junior engineers and share knowledge across the team.

-
Compliance & Security: Ensure all Splunk environments comply with Federal security policies, industry standards like ISO, and ITIL best practices. Lead the transition from M-21-31 to M-26-14 compliance, including CISA framework analysis and crafting IHS’s internal compliance policies, processes, and procedures.

Qualifications:

-
Experience : 5-8 years experience in Splunk/SIEM engineering and management

-
Clearance : U.S. Citizen with an Active Public Trust Level-4 or higher, or ability to obtain one through background investigation

-
Education: Bachelor’s or master’s degree in computer science, Information Technology, or a related field is typically required.

-
Splunk Expertise: Deep knowledge of Splunk Enterprise, Splunk Cloud, and Splunk Observability Cloud. Advanced proficiency in SPL, creating complex dashboards, alerts, and data models.

-
Programming & Scripting: Strong programming skills in Python, Java, or another backend language, coupled with extensive experience in shell scripting (bash).

-
Data Technologies: Solid understanding of relational and NoSQL databases and advanced data structures.

-
Architecture: Proven experience with microservices, major cloud platforms (AWS, Azure), and containerization technologies like Kubernetes.

-
Tools: Hands-on familiarity with CI/CD tools, configuration management (i.e.: Ansible), vulnerability management tools (Tenable One), and modern observability platforms (Palo Alto CoreTex XDR).

Preferred Skills:

- Professional experience building and deploying custom Splunk applications.

- Strong domain knowledge in cybersecurity, including IDS/IPS and SIEM/SEM concepts.

- Demonstrated experience with cloud-native architecture and managing SaaS platforms.

- Strong interpersonal and leadership skills, with a proven ability to mentor, coach, and lead through influence.

- Creative and strategic approach to problem-solving, with the ability to maintain a "big picture" view while focusing on details.

About Us

Diné Development Corporation (DDC) is a Navajo Nation–owned family of companies that provides government agencies and commercial organizations with high-quality IT, pro