ZipRecruiter

Log In

1

Lead Splunk Engineer Jobs (NOW HIRING)

CYKOR

Lead Splunk Architect

Annapolis, MD · On-site

Establish engineering standards and best practices across index naming, Sourcetypes, CIM compliance, field extractions, knowledge objects, configuration management, change control, application ...

New

Saransh Inc

Lead Splunk / Dynatrace Engineer

Hartford, CT · On-site

$103K - $136K/yr

Lead Splunk / Dynatrace Engineer Location: Hartford, CT Duration: long term Job Summary: We are seeking a Lead Splunk/Dynatrace Engineer with deep technical expertise in observability, search ...

NasTech Global, Inc.

Splunk Engineer

Charlotte, NC · On-site

Splunk Engineer Location: Charlotte, NC or Plano, TX(Hybrid - Onsite 3 days a week) Job Type ... to lead production incidents, perform RCA, and drive preventive solutions Strong Linux ...

New

Princeton IT Services

Splunk ITSI Lead SME

New York, NY · On-site

Splunk ITSI Lead SME Location: New York, NY Job Type: Contract Role Overview The Splunk ITSI Lead ... Provide SME guidance to engineering and operations teams Required Skills & Experience * 7+ years of ...

Xpect Solutions

Senior Splunk Engineer

Washington, DC

$118K - $162K/yr

Senior Splunk Engineer ID: 1000000053 Location: Washington,DC Clearance Level: Active Top Secret ... Lead the deployment and configuration of Splunk Enterprise or Splunk Cloud solutions, ensuring ...

Nastech Global

Splunk Engineer

Charlotte, NC · On-site

Splunk Engineer Location: Charlotte, NC or Plano, TX(Hybrid - Onsite 3 days a week) Job Type ... to lead production incidents, perform RCA, and drive preventive solutions Strong Linux ...

New

Ryde Technologies, LLC

Senior Splunk Engineer

Washington, DC · On-site

$129K - $177K/yr

The Senior Splunk Engineer will be responsible for designing, implementing, and optimizing Splunk ... Lead the deployment and configuration of Splunk Enterprise or Splunk Cloud solutions, ensuring ...

Genesis10

Splunk Engineer

Plano, TX · On-site

$63.68 - $71.68/hr

Genesis10 is currently seeking a Splunk Engineer for a contract position with a Global Financial ... use cases Lead incident response, troubleshooting, root cause analysis (RCA), and service ...

New

Xpect Solutions

Senior Splunk Engineer

Washington, DC · On-site

$129K - $177K/yr

Responsibilities : • Lead the deployment and configuration of Splunk Enterprise or Splunk Cloud ... junior engineers and maintain thorough documentation of configurations, processes, and best ...

Peraton

SITEC - Splunk Engineer - MacDill AFB

Tampa, FL · On-site

$86K - $138K/yr

Lead the design, engineering and deployment of Splunk User Behavior Analytics (UBA), focusing on the ingestion of identity-centric data sources (e.g., Active Directory, VPN, Cloud Access Security ...

Lentech, Inc.

Splunk Engineer 4

Laurel, MD · On-site

$82K - $109K/yr

The Splunk Engineer is responsible for designing, developing, maintaining, and enhancing Splunk applications and analytics, with opportunities to work independently or in a lead technical role.

ECS

Splunk Architect Lead

Portland, OR · On-site +1

Serve as the technical lead for Splunk engineering activities, providing direction, review, and mentorship to Splunk engineers, security engineers, analysts, and other technical contributors.

next page

Showing results 1-20

All JobsLead Splunk Engineer Jobs

Lead Splunk Engineer information

See salary details

$42.5K

$123.8K

$180.5K

How much do lead splunk engineer jobs pay per year?

As of Jul 14, 2026, the average yearly pay for lead splunk engineer in the United States is $123,784.00, according to ZipRecruiter salary data. Most workers in this role earn between $102,500.00 and $135,000.00 per year, depending on experience, location, and employer.

What does a Lead Splunk Engineer do?

A Lead Splunk Engineer oversees the design, implementation, and maintenance of Splunk environments within an organization. They are responsible for developing data ingestion strategies, creating dashboards and alerts, and ensuring the security and performance of Splunk deployments. In addition to technical tasks, they often lead a team of engineers, provide guidance on best practices, and collaborate with other IT and security teams to derive actionable insights from machine data.

What are some common challenges faced by Lead Splunk Engineers in managing large-scale deployments?

Lead Splunk Engineers often encounter challenges such as optimizing system performance across distributed environments, ensuring data integrity and security, and scaling infrastructure to handle increasing log volume. They also need to balance the demands of multiple stakeholders, troubleshoot complex data ingestion issues, and implement automation to streamline operations. Collaboration with security, IT, and DevOps teams is essential to maintain a reliable and efficient Splunk environment.

What are the key skills and qualifications needed to thrive as a Lead Splunk Engineer, and why are they important?

To thrive as a Lead Splunk Engineer, you need expertise in Splunk administration, log analysis, and system integration, typically supported by a degree in computer science or a related field. Proficiency with Splunk Enterprise, SPL (Search Processing Language), and relevant certifications like Splunk Certified Architect are highly valued. Strong problem-solving abilities, leadership, and effective communication are essential soft skills for guiding teams and collaborating across departments. These skills and qualifications ensure efficient management of complex data environments, robust security monitoring, and successful implementation of Splunk solutions.

What is the difference between Lead Splunk Engineer vs Splunk Engineer?

AspectLead Splunk EngineerSplunk Engineer
CertificationsSplunk Certified Power User, Admin, or ArchitectSplunk Certified Power User or Admin
Work EnvironmentLeads projects, mentors team, manages architecturePerforms deployment, configuration, and troubleshooting
ResponsibilitiesDesigns solutions, oversees implementation, guides teamSupports Splunk deployment, develops dashboards, maintains system

The main difference between a Lead Splunk Engineer and a Splunk Engineer lies in their responsibilities and leadership roles. The Lead typically manages projects, guides teams, and designs architecture, while the Splunk Engineer focuses on technical deployment and support tasks. Both roles require similar certifications and work in environments that utilize Splunk for data analysis and security.

More about Lead Splunk Engineer jobs
What job categories do people searching Lead Splunk Engineer jobs look for? The top searched job categories for Lead Splunk Engineer jobs are:
Lead Splunk Engineer jobs near you
Infographic showing various Lead Splunk Engineer job openings in the United States as of July 2026, with employment types broken down into 95% Full Time, 2% Part Time, and 3% Contract. Highlights an 87% Physical, 4% Hybrid, and 9% Remote job distribution, with an average salary of $123,784 per year, or $59.5 per hour.
Splunk Engineer/Architect with Security Clearance

Splunk Engineer/Architect with Security Clearance

Zachary Piper Solutions, LLC

Morrisville, NC • On-site

$140K - $180K/yr

Contractor

Medical, Dental, Vision, PTO

Posted 3 days ago

New

Job description

Piper Companies is seeking a Splunk Engineer / Architect to support a leading organization in the cybersecurity and enterprise technology industry. The Splunk Engineer / Architect will play a critical role in designing, implementing, and optimizing enterprise-scale Splunk environments within a SOC, with a strong focus on backend engineering and architectural design rather than dashboarding or end-user analytics. The Splunk Engineer/Architect is a long term contract opportunity, requires an active Secret Clearance and requires you to work onsite 5 days per week in RTP, NC. Responsibilities of the Splunk Engineer / Architect: * Design and deploy scalable, highly available Splunk architectures across on-prem, cloud, and hybrid environments.
* Lead Splunk engineering efforts including installation, configuration, upgrades, and ongoing platform maintenance (indexers, search heads, forwarders, clustering).
* Develop and execute data ingestion strategies, including onboarding, normalization, parsing, and performance optimization.
* Establish governance, platform standards, and best practices to ensure long-term scalability and reliability.
* Support SOC operations by building and tuning SIEM use cases, correlation searches, and alerts aligned with MITRE ATT&CK.
* Collaborate with cybersecurity and infrastructure teams to enhance threat detection, monitoring, and incident response capabilities.
Requirements of the Splunk Engineer / Architect: * Active Secret Clearance required.
* 5+ years of hands-on Splunk Engineering/Architecture experience (backend focus, not dashboarding).
* Strong expertise with Splunk Enterprise and Splunk Enterprise Security (ES) in large-scale environments.
* Deep understanding of data ingestion, indexing, clustering (indexer/search head), and search optimization.
* Experience supporting Splunk within a SOC and contributing to SIEM/security monitoring strategies.
Compensation for the Splunk Engineer / Architect: * $140,000-$180,000
* Full Comprehensive Benefits: Health, Vision, Dental, PTO, Paid Holiday and Sick Leave if Required by Law.
Keywords: Splunk, Splunk Engineer, Splunk Architect, SIEM, Splunk Enterprise, Splunk ES, Security Operations Center, SOC, data ingestion, indexer clustering, search head clustering, MITRE ATT&CK, threat detection, logging strategy, monitoring, cybersecurity, backend Splunk engineering, RTP jobs, active secret clearance This job opens for applications on 07/10/2026. Applications for this job will be accepted for at least 30 days from the posting date. #LI-AG1 #ONSITE

Apply