Head Server Jobs in Fort Mill, SC (NOW HIRING)

Role Overview

We are seeking an experienced Senior Cybersecurity Engineer – Splunk with deep expertise in designing, implementing, and optimizing enterprise-scale SIEM and observability platforms. This role will lead the architecture and operations of Splunk Enterprise environments, data optimization and enabling advanced security monitoring across cloud and on-prem ecosystems.

The ideal candidate will bring strong hands-on experience across Splunk architecture, cybersecurity frameworks, cloud platforms, and data engineering, with the ability to drive both strategic initiatives and day-to-day operations.

Key Responsibilities

Splunk Architecture & Engineering

• Design, deploy, and manage enterprise-scale Splunk environments including:
  • Indexer Clusters
  • Search Head Clusters
  • License Master, Cluster Master, Deployment Server, Deployer
  • Heavy Forwarders and Universal Forwarders
• Perform installation, configuration, and support of Splunk across Linux and Windows environments
• Lead capacity planning and scaling strategies for Splunk infrastructure
• Ensure high availability, performance, and resilience of the Splunk platform

Security Monitoring & SIEM Operations

• Implement and support Splunk Enterprise Security (ES) and other premium apps (ITSI, UBA, TrackMe)
• Develop and maintain alerts, dashboards, reports, and correlation searches
• Troubleshoot and resolve issues related to alerts, dashboards, and search performance
• Support SOC operations and incident response through advanced log analytics

Data Optimization

• Design and implement pipelines for log routing, filtering, and transformation
• Reduce data ingestion volume and optimize Splunk licensing costs
• Filter unnecessary data at forwarder level (Heavy Forwarders) to improve efficiency
• Manage Cribl installation, configuration, and ongoing support

Stakeholder Collaboration & Support

• Work with business stakeholders to gather security and monitoring requirements
• Support developers and users by troubleshooting platform and data issues
• Provide guidance on data onboarding, filtering, and optimization strategies
• Lead Splunk POCs, implementations, and operational support initiatives

Required Qualifications

• 8–10+ years of experience with Splunk (Engineering, Architecture, Administration)
• Strong expertise in:
  • Splunk Enterprise architecture and clustering
  • Splunk Enterprise Security (ES)
  • Log ingestion, parsing, and data modeling
• Experience with cloud platforms: AWS, Azure, or GCP

Preferred Qualifications

• Splunk certifications (e.g., Splunk Architect, Splunk Admin, Power User)
• Experience with Splunk SOAR / Phantom
• Experience with DevSecOps and Infrastructure as Code
• Background in enterprise data platforms and analytics

Role Overview

We are seeking an experienced Senior Cybersecurity Engineer – Splunk with deep expertise in designing, implementing, and optimizing enterprise-scale SIEM and observability platforms. This role will lead the architecture and operations of Splunk Enterprise environments, data optimization and enabling advanced security monitoring across cloud and on-prem ecosystems.

The ideal candidate will bring strong hands-on experience across Splunk architecture, cybersecurity frameworks, cloud platforms, and data engineering, with the ability to drive both strategic initiatives and day-to-day operations.

Key Responsibilities

Splunk Architecture & Engineering

• Design, deploy, and manage enterprise-scale Splunk environments including:
  • Indexer Clusters
  • Search Head Clusters
  • License Master, Cluster Master, Deployment Server, Deployer
  • Heavy Forwarders and Universal Forwarders
• Perform installation, configuration, and support of Splunk across Linux and Windows environments
• Lead capacity planning and scaling strategies for Splunk infrastructure
• Ensure high availability, performance, and resilience of the Splunk platform

Security Monitoring & SIEM Operations

• Implement and support Splunk Enterprise Security (ES) and other premium apps (ITSI, UBA, TrackMe)
• Develop and maintain alerts, dashboards, reports, and correlation searches
• Troubleshoot and resolve issues related to alerts, dashboards, and search performance
• Support SOC operations and incident response through advanced log analytics

Data Optimization

• Design and implement pipelines for log routing, filtering, and transformation
• Reduce data ingestion volume and optimize Splunk licensing costs
• Filter unnecessary data at forwarder level (Heavy Forwarders) to improve efficiency
• Manage Cribl installation, configuration, and ongoing support

Stakeholder Collaboration & Support

• Work with business stakeholders to gather security and monitoring requirements
• Support developers and users by troubleshooting platform and data issues
• Provide guidance on data onboarding, filtering, and optimization strategies
• Lead Splunk POCs, implementations, and operational support initiatives

Required Qualifications

• 8–10+ years of experience with Splunk (Engineering, Architecture, Administration)
• Strong expertise in:
  • Splunk Enterprise architecture and clustering
  • Splunk Enterprise Security (ES)
  • Log ingestion, parsing, and data modeling
• Experience with cloud platforms: AWS, Azure, or GCP

Preferred Qualifications

• Splunk certifications (e.g., Splunk Architect, Splunk Admin, Power User)
• Experience with Splunk SOAR / Phantom
• Experience with DevSecOps and Infrastructure as Code
• Background in enterprise data platforms and analytics