Splunk Architect

Location: Remote

Pay Rate: $75–$88 per hour

Hours: Full-Time | Remote

Duration: Long-Term Contract

Our client in the pharma industry is seeking an experienced Certified Splunk Architect to design, implement, and optimize a large-scale, hybrid Splunk environment. This role focuses on advanced security detection engineering, automation, and developing innovative security, operations, and business solutions utilizing Splunk Enterprise, Splunk Cloud, and Splunk Enterprise Security (ES).

• Design, implement, and maintain complex, large-scale Splunk Enterprise and Splunk Cloud environments.
• Develop and enhance custom security detection rules, integrating third-party tools and Splunk Behavioral Analytics within a Risk-Based Alerting (RBA) framework.
• Architect and implement advanced Splunk Enterprise Security (ES) solutions to support security monitoring, threat detection, and actionable intelligence.
• Design and develop automated workflows using Splunk SOAR and other automation tools to streamline pre-ticket and post-ticket processes.
• Create executive-level and technical dashboards to monitor security detection readiness, operational performance, and key security metrics.
• Conduct regular Splunk environment health checks, performance tuning, and infrastructure optimization to improve search latency, data processing, and resource utilization.
• Develop and maintain integrations across multiple security data sources and platforms.
• Serve as a Splunk Subject Matter Expert (SME), providing technical leadership, documentation, and guidance to Security, Operations, and Business teams.
• Collaborate with cross-functional teams to develop innovative Splunk use cases and enhance overall security operations.

• Required: Active Splunk Certified Architect certification.