Senior Splunk Administrator

Valiant Solutions

. Design, develop and implement processes for ingesting data from various sources into Splunk, including HEC, Splunk Stream, Technical Add-Ons, Universal Forwarder Collections, custom APIs and other ingest mechanisms .

Posted 10/2/2026full-timeRemote • United StatesSenior💰 $140,000 - $170,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Splunk administration and engineering, including data ingestion, system configuration, and performance optimization. Proficient in managing security applications and ensuring compliance with regulatory requirements.

Highest-signal resume keywords

Splunk AdministrationData Ingestion PipelinesSearch Processing Language (SPL)Splunk Core Certified ConsultantLinux Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Data Parsing TechniquesRegular ExpressionsOptimizing Data PipelinesHandling Large Data VolumesSystem Connections ConfigurationTechnical Add-Ons DevelopmentRoot Cause AnalysisIncident ResponseAccount ManagementCybersecurity Tools Integration

Soft Skills

Analytical SkillsProblem-Solving SkillsCollaboration

Tools & Technologies

SplunkHECUniversal ForwarderCriblSyslogSyslog-ngCloud-Based Containers

Certifications & Qualifications

Splunk Core Certified ConsultantSplunk Enterprise Certified ArchitectSplunk Enterprise Certified Admin

Industry Keywords

FISMA ComplianceM-26-14 RequirementsOperational DocumentationSOPsFraud Analytics

Tech Stack

Tools & technologies

CloudCyber SecurityLinuxSplunk

About the role

Key responsibilities & impact

Design, develop and implement processes for ingesting data from various sources into Splunk, including HEC, Splunk Stream, Technical Add-Ons, Universal Forwarder Collections, custom APIs and other ingest mechanisms
Configure and manage data inputs for logs, metrics, and events to determine compliance with M-26-14 requirements at the FISMA system boundary level
Establish and maintain secure and reliable connections between Splunk and external systems or data sources
Create, monitor, and maintain alerts for failed data inputs
Create and maintain custom Technical Add-Ons for non-standard ingest paths leveraging API connections
Ensure proper authentication and authorization mechanisms for data transfer and system communication
Oversee Splunk infrastructure configuration and maintenance for optimal performance and security
Collaborate with cross-functional teams to troubleshoot and resolve Splunk issues
Conduct root cause analysis and implement preventive measures
Use Linux skills to manage and maintain the underlying operating system or cloud-based containers of Splunk servers and other security applications
Monitor tool health and performance to identify issues, bugs, or potential improvements
Develop, review, and update operational documentation, including SOPs, job aids, application checklists, and playbooks
Support system access controls, including account management, access enforcement, information flow enforcement, least privilege, account requests, and account recertifications
Collaborate with SOC teams on process optimization, tool tuning, tool integration, information sharing, playbook development, and incident response
Perform implementation, administration, operations and maintenance, optimization, and integration of cybersecurity tools, technologies, and services
Conduct regular Splunk Enterprise upgrades for deployment servers, heavy forwarders, and syslog servers

Requirements

What you’ll need

4 years of Information Technology Experience
Bachelor of Science in Computer Science, Information Systems, Mathematics, Engineering, related degree or an additional two (2) years of experience
3+ years of Splunk administration or engineering experience
Proficiency in configuring and managing Splunk inputs, setting up data ingestion pipelines, and establishing system connections
Knowledge of Splunk's Search Processing Language (SPL), data parsing techniques, and regular expressions
Skilled in optimizing data pipelines for performance and efficiency, handling large data volumes, and implementing best practices for data integrity and consistency
Splunk Core Certified Consultant or Splunk Enterprise Certified Architect certification preferred
Splunk Enterprise or Splunk Cloud Certified Admin acceptable
Experience as an engineering team lead
Experience working with Splunk, syslog, syslog-ng or systems designed to collect and centralize logs
Experience leveraging Cribl to optimize Splunk ingest
Experience assisting teams with Fraud Analytics
Strong analytical and problem-solving skills, with the ability to effectively prioritize and execute tasks

Benefits

Comp & perks

Valiant pays 99% of the Medical, Dental, and Vision Coverage for Full-time Employees
Valiant contributes 25% towards Health Coverage for Family and Dependents
100% Paid Short Term Disability and Life Insurance Policy for Full-time Employees
100% Paid Certifications
401K Matching up to 4%
Paid Time Off
Paid Federal Holidays
Wellness & Fitness Program
Valiant University – Online Education and Training Portal
FSA programs for: Medical Costs, Dependent Care, Transit, and Parking
Referral Bonuses