ZipRecruiter

Log In

1

Splunk Architect Jobs in Oregon (NOW HIRING)

ECS

Splunk Architect Lead

Portland, OR · On-site +1

The Splunk Architect and Lead is responsible for defining, guiding, and overseeing the architecture, implementation, optimization, and governance of Splunk capabilities that support cybersecurity ...

ECS

Senior Splunk Engineer

Portland, OR · On-site +1

$125K - $148K/yr

The Senior Splunk Engineer designs, implements, maintains, and optimizes Splunk capabilities that ... Develop and maintain architecture diagrams, onboarding procedures, configuration standards ...

ECS

SOC Tier 3 Analyst

Portland, OR · On-site

$88K - $104K/yr

Coordinate with SOC Threat Hunter to convert hunt findings into operational detections and with Senior Splunk Engineer or Splunk Architect/Lead for technical implementation. Reporting, Briefings ...

ECS

SOC Tier 2 Analyst

Portland, OR · On-site

Provide operational requirements and validation feedback to SOC Analyst 3, SOC Threat Hunter, Senior Splunk Engineer, Splunk Architect/Lead, Security Engineer, and SOC Technical Writer as appropriate.

Atos

Apps AI Solution Architect AMS

OR · Remote

$59 - $77.75/hr

Apps AI Architect 539988 Location: North America (Remote) Role Summary The Apps AI Architect will ... Familiarity with observability and AIOps platforms including DataDog, Dynatrace, Moogsoft, Splunk ...

phData

OR

In this role, you will lead the architecture, security posture, and continuous improvement of ... as Splunk, Microsoft Sentinel, CrowdStrike, or Datadog, including designing log pipelines ...

Intel

Analytics and AI Solution Architect

Hillsboro, OR · On-site

$188K - $265K/yr

... Splunk. - Ensure robust information security practices in all facets of the development lifecycle. Qualifications: Minimum Qualifications - Bachelor's degree in Computer Science, Information ...

IP Fabric

OR · Hybrid

ServiceNow, NetBox, Nautobot, Splunk, and others. * Collaborate with Product and Engineering to ... Deep knowledge of architectural principles (ie modular design, tradeoffs, simplicity vs ...

Valiant Solutions, LLC

Senior SIEM Engineer

$114K - $156K/yr

Splunk Certified Architect, Splunk Enterprise Security Certified Admin, or Splunk Core Certified Consultant is strongly preferred. * Required to obtain and maintain a Non-Sensitive / High Risk ...

iHerb

OR · On-site

$114K - $156K/yr

Architect, build, and maintain Splunk Enterprise Security (ES) integrations, including onboarding log sources, managing indexes, tuning correlation searches, and configuring automated response ...

Parachute Health

Lead Automation Engineer

OR · Remote

$80K - $130K/yr

Integrate with 30+ systems (AWS, GitHub, Okta, Drata, Splunk) at scale, pulling structured data and ... Sit in on architecture reviews and incident response. Benefits * Medical, Dental, and Vision ...

next page

Showing results 1-20

All JobsSplunk Architect JobsSplunk Architect Jobs in Oregon

Splunk Architect information

See Oregon salary details

$61

$85

$96

How much do splunk architect jobs pay per hour?

As of Jul 13, 2026, the average hourly pay for splunk architect in Oregon is $85.59, according to ZipRecruiter salary data. Most workers in this role earn between $79.04 and $93.51 per hour, depending on experience, location, and employer.

What is the difference between Splunk Architect vs Splunk Engineer?

AspectSplunk ArchitectSplunk Engineer
Primary RoleDesigns and oversees the overall Splunk deployment architectureDevelops, implements, and maintains Splunk solutions and dashboards
Required SkillsArchitecture design, project management, advanced Splunk knowledgeSplunk configuration, scripting, data ingestion, troubleshooting
CertificationsSplunk Certified Architect, Splunk Certified Power UserSplunk Certified Power User, Splunk Certified Admin
Work EnvironmentTypically in enterprise IT teams, focusing on planning and architectureHands-on technical roles within IT or security teams

Splunk Architects focus on designing and planning the overall Splunk infrastructure, ensuring scalability and integration, while Splunk Engineers handle the day-to-day implementation, configuration, and troubleshooting of Splunk solutions. Both roles require strong Splunk certifications and technical expertise, but differ mainly in scope and responsibilities.

What Is a Splunk Architect?

As a Splunk architect, you create applications that can perform specific tasks within the Splunk environment. Your responsibilities may include application or software development supporting customized data solutions for your employer or client. For example, you may create a dashboard on which you can select and visualize information from a database, then use that data to generate a report. As a Splunk architect, you may also be responsible for the security of the system and network that the company uses to operate Splunk solutions.

What is a Splunk Architect?

A Splunk Architect is an IT professional who designs, configures, and optimizes Splunk environments for organizations. They are responsible for creating scalable architectures, ensuring data is efficiently ingested and searchable, and setting up dashboards and alerts for monitoring and analysis. Splunk Architects work closely with security, IT, and business teams to tailor the platform to organizational needs and ensure best practices in deployment and data management. Their expertise ensures that Splunk solutions are robust, secure, and aligned with business objectives.

What are the key skills and qualifications needed to thrive as a Splunk Architect, and why are they important?

To thrive as a Splunk Architect, you need expertise in Splunk deployment, data ingestion, and security information and event management (SIEM), often supported by a bachelor’s degree in computer science or a related field. Familiarity with Splunk Enterprise, Splunk Cloud, scripting languages (like Python), and certifications such as Splunk Certified Architect are typically required. Strong analytical thinking, problem-solving skills, and the ability to communicate complex technical concepts clearly are crucial soft skills. These skills ensure the effective design, implementation, and optimization of Splunk solutions that meet organizational security and operational needs.

How does a Splunk Architect collaborate with other IT teams to ensure effective data integration and system performance?

A Splunk Architect regularly works with security, operations, and development teams to design and implement data ingestion pipelines, define data models, and optimize search performance. They often lead technical workshops to understand data sources and application requirements, ensuring that Splunk environments are tailored to organizational needs. Effective collaboration includes setting data governance standards, troubleshooting integration issues, and mentoring team members on best practices for using Splunk. This cross-functional teamwork helps maintain secure, scalable, and high-performing analytics platforms.
More about Splunk Architect jobs
What are the most commonly searched types of Splunk Architect jobs in Oregon? The most popular types of Splunk Architect jobs in Oregon are:
What are popular job titles related to Splunk Architect jobs in Oregon? For Splunk Architect jobs in Oregon, the most frequently searched job titles are:
What job categories do people searching Splunk Architect jobs in Oregon look for? The top searched job categories for Splunk Architect jobs in Oregon are:
What are popular job titles related to Splunk Architect jobs in OR? For Splunk Architect jobs in OR, the most frequently searched job titles are:
Splunk Architect jobs near you
Splunk Architect Lead

Splunk Architect Lead

ECS

Portland, OR • On-site, Remote

Full-time

Re-posted 24 days ago

Job description

Everforth ECS is seeking a Splunk Architect Lead to work in our Portland, OR office or Remotely. Note: This position is contingent upon contract award.
The Splunk Architect and Lead is responsible for defining, guiding, and overseeing the architecture, implementation, optimization, and governance of Splunk capabilities that support cybersecurity monitoring, threat detection, incident response, reporting, and enterprise security operations. This role provides technical leadership for Splunk Enterprise, Splunk Enterprise Security, Splunk Cloud, and related integrations across complex operational environments.
The ideal candidate combines deep Splunk architecture expertise, hands-on engineering experience, security operations knowledge, and leadership ability to guide engineers, analysts, stakeholders, and vendors. This role establishes scalable designs, enforces technical standards, ensures platform reliability, and translates mission and SOC requirements into secure, maintainable, and operationally effective Splunk solutions.
Key Responsibilities
Splunk Architecture & Strategy
  • Define and maintain the target Splunk architecture, including indexer clusters, search head clusters, deployment servers, heavy forwarders, universal forwarders, apps, add-ons, integrations, storage, and high-availability components.
  • Develop technical roadmaps, architecture recommendations, implementation plans, and modernization strategies for Splunk Enterprise, Splunk Enterprise Security, Splunk Cloud, or hybrid Splunk environments.
  • Ensure Splunk architecture supports SOC operations, security monitoring, incident response, compliance reporting, data retention, scalability, resilience, and performance requirements.
  • Assess current-state capabilities, identify architectural gaps, and recommend improvements aligned to program priorities, operational needs, and cybersecurity best practices.

Technical Leadership & Governance
  • Serve as the technical lead for Splunk engineering activities, providing direction, review, and mentorship to Splunk engineers, security engineers, analysts, and other technical contributors.
  • Establish and enforce Splunk standards for index naming, sourcetypes, field extractions, Common Information Model alignment, knowledge objects, access controls, app deployment, configuration management, and change control.
  • Review major design decisions, configuration changes, content deployments, and integration approaches for technical soundness, maintainability, security, and operational impact.
  • Coordinate Splunk engineering priorities, assign technical work as needed, and ensure deliverables are completed accurately, consistently, and on schedule.

Platform Design, Scalability & Reliability
  • Lead design efforts for platform performance, capacity, storage, retention, data lifecycle management, search concurrency, licensing, disaster recovery, backup, and high availability.
  • Oversee platform health monitoring, performance tuning, system optimization, upgrade planning, patching strategies, and long-term maintenance planning.
  • Guide troubleshooting of complex issues involving ingestion delays, parsing problems, skipped or dropped data, search performance, data model acceleration, app conflicts, and infrastructure dependencies.
  • Partner with infrastructure, cloud, network, identity, endpoint, and system administration teams to ensure Splunk architecture integrates securely and reliably with the broader environment.

Data Architecture & Integration Oversight
  • Define data onboarding architecture and integration patterns for security, infrastructure, cloud, endpoint, network, identity, application, vulnerability, and operational data sources.
  • Oversee normalization, parsing, field extraction, data routing, index design, retention settings, source coverage, and Splunk Common Information Model implementation.
  • Prioritize data source onboarding based on mission value, SOC use cases, detection requirements, compliance needs, and platform capacity constraints.
  • Ensure integrations with EDR, NDR, firewalls, IDS/IPS, proxy, DNS, cloud platforms, identity providers, ticketing systems, SOAR platforms, and case management tools are secure, reliable, and supportable.

Security Analytics & SOC Enablement
  • Translate SOC, threat hunting, threat intelligence, incident response, and leadership requirements into Splunk architecture, data, dashboard, reporting, and detection engineering capabilities.
  • Provide technical guidance for correlation searches, notable event rules, dashboards, reports, risk-based alerting, data models, content packs, and security monitoring use cases.
  • Support detection tuning, alert fidelity improvement, false-positive reduction, source coverage analysis, and monitoring gap remediation in coordination with SOC leadership and analysts.
  • Ensure Splunk content and data capabilities support timely triage, investigation, evidence retrieval, event reconstruction, and operational reporting.

Implementation Oversight & Quality Assurance
  • Lead or oversee implementation activities for Splunk platform components, integrations, apps, add-ons, dashboards, reports, alerts, and security content.
  • Validate engineering work products, test plans, deployment packages, configuration changes, and operational procedures before release into production environments.
  • Ensure Splunk changes follow approved change management, configuration management, testing, documentation, and rollback processes.
  • Coordinate with vendors, product support, and external technical teams to resolve complex issues and evaluate new capabilities.

Stakeholder Engagement & Program Support
  • Act as the primary technical point of contact for Splunk architecture, platform strategy, implementation risks, technical dependencies, and capability planning.
  • Brief program leadership, SOC leadership, technical teams, and stakeholders on Splunk status, risks, roadmap items, architectural decisions, and recommended investments.
  • Translate complex Splunk platform issues, data coverage gaps, and technical tradeoffs into clear operational and business language.
  • Support planning, estimation, schedule coordination, status reporting, and prioritization for Splunk-related initiatives.

Documentation, Standards & Continuous Improvement
  • Develop and maintain architecture diagrams, engineering standards, design documents, runbooks, operational procedures, troubleshooting guides, and technical decision records.
  • Maintain governance for knowledge object management, role-based access, app lifecycle management, source onboarding, dashboard standards, and detection content lifecycle processes.
  • Evaluate emerging Splunk features, apps, add-ons, integrations, automation approaches, and security analytics practices to improve reliability, efficiency, and mission value.
  • Mentor technical staff and promote consistent Splunk engineering practices, SPL development standards, data quality expectations, and operational discipline.

Salary Range:$155,000 - 165,000
General Description of Benefits
  • U.S. Citizenship with ability to obtain and maintain a DOE "L" clearance after start.
  • 7+ years of experience in cybersecurity engineering, SIEM architecture, security operations, infrastructure engineering, or related technical roles.
  • 5+ years of hands-on Splunk administration, engineering, implementation, or architecture experience in enterprise, mission-critical, or security operations environments.
  • Proven experience designing, leading, or supporting complex Splunk Enterprise, Splunk Enterprise Security, Splunk Cloud, or distributed Splunk environments.
  • Strong understanding of Splunk architecture, including indexers, search heads, deployment servers, forwarders, apps, add-ons, indexes, sourcetypes, knowledge objects, permissions, data models, and licensing.
  • Demonstrated experience with data onboarding, parsing, field extraction, normalization, Common Information Model alignment, dashboards, reports, correlation searches, and SPL development.
  • Experience leading technical teams, reviewing engineering work products, establishing standards, and coordinating complex implementation or optimization activities.
  • Understanding of SOC operations, incident response, threat hunting, detection engineering, cybersecurity data sources, and security monitoring use cases.
  • Strong written and verbal communication skills, including the ability to brief technical and non-technical stakeholders on architecture, risks, priorities, and recommendations.

Apply