Splunk Engineer

We are looking for a Splunk Engineer with 5–8 years of experience to build and scale monitoring, alerting, and observability solutions. The role focuses on Splunk dashboarding, data onboarding, and alert optimization to improve incident response and operational visibility.

• Design and maintain Splunk dashboards (Classic & Dashboard Studio) for operations and business reporting
• Develop and optimize SPL queries (rex, spath, stats, timechart, etc.) for performance and scalability
• Manage data onboarding using Universal Forwarders, Heavy Forwarders, HEC, and syslog integrations
• Own index strategy, retention policies, source types, field extractions, and CIM alignment
• Configure and tune alerts with actionable thresholds, suppression, and routing
• Build dynamic dashboards with drill downs and filters for self‑service troubleshooting
• Support onboarding of new applications/brands and ensure consistent monitoring coverage
• Collaborate with app, infra, and security teams to resolve ingestion and data issues
• Implement RBAC and knowledge object permissions for access control
• Create documentation, runbooks, and support users with training

• Strong experience with Splunk (Enterprise/Cloud)
• Expertise in SPL query development and optimization
• Experience with log ingestion pipelines and integrations
• Understanding of monitoring, alerting, and incident management
• Strong troubleshooting and analytical skills

• Experience in SRE / NOC / Observability environments
• Exposure to APM / metrics tools (Splunk Observability, New Relic, etc.)
• Knowledge of Azure/AWS and basic scripting (Python/Shell)

The pay range that the employer in good faith reasonably expects to pay for this position is $39.30/hour - $61.40/hour. Our benefits include medical, dental, vision and retirement benefits. Applications will be accepted on an ongoing basis.

We are an equal opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, sex, sexual orientation, age, veteran status, disability, genetic information, or other applicable legally protected characteristic. Qualified applicants with arrest or conviction records will be considered for employment in accordance with applicable law, including the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act.

Unincorporated LA County workers: we reasonably believe that criminal history may have a direct, adverse and negative relationship with the following job duties, possibly resulting in the withdrawal of a conditional offer of employment: client‑provided property, including hardware (both of which may include data) entrusted to you from theft, loss or damage; return all portable client computer hardware in your possession (including the data contained therein) upon completion of the assignment, and maintain the confidentiality of client proprietary, confidential, or non‑public information.

In addition, job duties require access to secure and protected client information technology systems and related data security obligations.