Splunk DevOps Engineer (AWS)

Ascending - Fairfax, VA

Full-time - Senior

Remote - Fairfax, VA

Educational Services

About the position

The Senior Splunk DevOps Engineer role is a long-term contract position focused on managing and optimizing a large-scale Splunk deployment in a cloud-based environment, specifically AWS. This position emphasizes automation, security, and performance optimization, making it ideal for candidates with extensive experience in Splunk and cloud technologies. The role requires collaboration with development and operations teams to ensure system performance and security, along with troubleshooting and implementing best practices in a dynamic setting.

Responsibilities

• Manage and maintain a large-scale Splunk deployment hosted in AWS.
• Integrate, configure, and optimize Splunk for log analysis, monitoring, and troubleshooting.
• Collaborate with development and operations teams to ensure system performance, scalability, and security.
• Automate and optimize deployment processes, monitoring, and infrastructure using Infrastructure as Code (IaC) tools such as Terraform, Ansible, or CloudFormation.
• Implement security best practices and leverage Splunk Enterprise Security for system monitoring.
• Troubleshoot production issues and resolve system/application errors within the Splunk ecosystem.
• Set up and manage SC4S (Splunk Connect for Syslog) for log collection.
• Execute standard Splunk onboarding procedures, ensuring proper log ingestion, parsing, and adherence to the Splunk Common Information Model (CIM).
• Implement and manage Splunk apps and add-ons for specialized use cases and data visualizations.

Requirements

• 8+ years of experience as a Splunk Security Engineer or DevOps Engineer in a large, distributed environment.
• US Citizenship or Green Card holder.
• Proven experience operating and managing Splunk in cloud (AWS) and/or hybrid environments.
• Strong knowledge of AWS infrastructure and services, with hands-on experience in platform optimization.
• Proficiency in Linux, shell scripting, and GitHub for code management.
• Hands-on experience with Terraform, CloudFormation, or similar automation tools.
• Familiarity with CI/CD tools.
• Experience with containerization (Docker, Kubernetes) and working within cloud environments (AWS, Azure, GCP).
• Strong problem-solving and troubleshooting skills, particularly in multi-tenant enterprise environments.
• Expertise in Splunk Search Processing Language (SPL), dashboard creation, and complex query development.
• Excellent communication and collaboration skills, with the ability to work under pressure in fast-paced environments.

Nice-to-haves

• Experience with Splunk HTTP Event Collector (HEC), syslog, log management and security monitoring.
• Hands-on expertise with AWS Cloud infrastructure governance and performance optimization.
• Strong scripting skills in Python, Bash, or other equivalent languages.

Benefits

• 100% Remote work option
• Long-term contract to hire
• Available for W2 or 1099 employment