ZipRecruiter

Log In

1

Splunk Architect Jobs (NOW HIRING)

Ashburn Consulting

Splunk Engineer

Camp Springs, MD · On-site

Architect, deploy, operate, and maintain enterprise Splunk infrastructure. * Support SIEM data ingestion, indexing, normalization, dashboarding, alerting, and operational reporting. * Develop ...

Princeton IT Services

Splunk ITSI Lead SME

New York, NY · On-site

Splunk ITSI Lead SME Location: New York, NY Job Type: Contract Role Overview The Splunk ITSI Lead SME will be responsible for designing, configuring, and governing IT Service Intelligence (ITSI) to ...

Leidos

Splunk Content Developer

Arlington, VA · On-site

Conduct periodic architectural reviews of Splunk and related systems to assess effectiveness and propose optimal installation alternatives as required * Develop and manage comprehensive documentation ...

next page

Showing results 1-20

All JobsSplunk Architect Jobs

Splunk Architect information

See salary details

$58

$80

$91

How much do splunk architect jobs pay per hour?

As of Jul 18, 2026, the average hourly pay for splunk architect in the United States is $80.95, according to ZipRecruiter salary data. Most workers in this role earn between $74.76 and $88.46 per hour, depending on experience, location, and employer.

What is the difference between Splunk Architect vs Splunk Engineer?

AspectSplunk ArchitectSplunk Engineer
Primary RoleDesigns and oversees the overall Splunk deployment architectureDevelops, implements, and maintains Splunk solutions and dashboards
Required SkillsArchitecture design, project management, advanced Splunk knowledgeSplunk configuration, scripting, data ingestion, troubleshooting
CertificationsSplunk Certified Architect, Splunk Certified Power UserSplunk Certified Power User, Splunk Certified Admin
Work EnvironmentTypically in enterprise IT teams, focusing on planning and architectureHands-on technical roles within IT or security teams

Splunk Architects focus on designing and planning the overall Splunk infrastructure, ensuring scalability and integration, while Splunk Engineers handle the day-to-day implementation, configuration, and troubleshooting of Splunk solutions. Both roles require strong Splunk certifications and technical expertise, but differ mainly in scope and responsibilities.

What Is a Splunk Architect?

As a Splunk architect, you create applications that can perform specific tasks within the Splunk environment. Your responsibilities may include application or software development supporting customized data solutions for your employer or client. For example, you may create a dashboard on which you can select and visualize information from a database, then use that data to generate a report. As a Splunk architect, you may also be responsible for the security of the system and network that the company uses to operate Splunk solutions.

What is a Splunk Architect?

A Splunk Architect is an IT professional who designs, configures, and optimizes Splunk environments for organizations. They are responsible for creating scalable architectures, ensuring data is efficiently ingested and searchable, and setting up dashboards and alerts for monitoring and analysis. Splunk Architects work closely with security, IT, and business teams to tailor the platform to organizational needs and ensure best practices in deployment and data management. Their expertise ensures that Splunk solutions are robust, secure, and aligned with business objectives.

What are the key skills and qualifications needed to thrive as a Splunk Architect, and why are they important?

To thrive as a Splunk Architect, you need expertise in Splunk deployment, data ingestion, and security information and event management (SIEM), often supported by a bachelor’s degree in computer science or a related field. Familiarity with Splunk Enterprise, Splunk Cloud, scripting languages (like Python), and certifications such as Splunk Certified Architect are typically required. Strong analytical thinking, problem-solving skills, and the ability to communicate complex technical concepts clearly are crucial soft skills. These skills ensure the effective design, implementation, and optimization of Splunk solutions that meet organizational security and operational needs.

How does a Splunk Architect collaborate with other IT teams to ensure effective data integration and system performance?

A Splunk Architect regularly works with security, operations, and development teams to design and implement data ingestion pipelines, define data models, and optimize search performance. They often lead technical workshops to understand data sources and application requirements, ensuring that Splunk environments are tailored to organizational needs. Effective collaboration includes setting data governance standards, troubleshooting integration issues, and mentoring team members on best practices for using Splunk. This cross-functional teamwork helps maintain secure, scalable, and high-performing analytics platforms.
More about Splunk Architect jobs
What cities are hiring for Splunk Architect jobs? Cities with the most Splunk Architect job openings:
What are the most commonly searched types of Splunk Architect jobs? The most popular types of Splunk Architect jobs are:
Who are the top companies hiring for Splunk Architect jobs? The top employers for Splunk Architect jobs are:
What states have the most Splunk Architect jobs? States with the most job openings for Splunk Architect jobs include:
What job categories do people searching Splunk Architect jobs look for? The top searched job categories for Splunk Architect jobs are:
What are popular job titles related to Splunk Architect jobs? For Splunk Architect jobs, the most frequently searched job titles are:
Splunk Architect jobs near you
Senior Cybersecurity Engineer Splunk

Senior Cybersecurity Engineer Splunk

IntraEdge

Charlotte, NC

$111K - $153K/yr

Full-time

Re-posted 3 days ago

Job description

Role Overview

We are seeking an experienced Senior Cybersecurity Engineer – Splunk with deep expertise in designing, implementing, and optimizing enterprise-scale SIEM and observability platforms. This role will lead the architecture and operations of Splunk Enterprise environments, data optimization and enabling advanced security monitoring across cloud and on-prem ecosystems.

The ideal candidate will bring strong hands-on experience across Splunk architecture, cybersecurity frameworks, cloud platforms, and data engineering, with the ability to drive both strategic initiatives and day-to-day operations.

Key Responsibilities

Splunk Architecture & Engineering

  • Design, deploy, and manage enterprise-scale Splunk environments including:
    • Indexer Clusters
    • Search Head Clusters
    • License Master, Cluster Master, Deployment Server, Deployer
    • Heavy Forwarders and Universal Forwarders
  • Perform installation, configuration, and support of Splunk across Linux and Windows environments
  • Lead capacity planning and scaling strategies for Splunk infrastructure
  • Ensure high availability, performance, and resilience of the Splunk platform

Security Monitoring & SIEM Operations

  • Implement and support Splunk Enterprise Security (ES) and other premium apps (ITSI, UBA, TrackMe)
  • Develop and maintain alerts, dashboards, reports, and correlation searches
  • Troubleshoot and resolve issues related to alerts, dashboards, and search performance
  • Support SOC operations and incident response through advanced log analytics

Data Optimization

  • Design and implement pipelines for log routing, filtering, and transformation
  • Reduce data ingestion volume and optimize Splunk licensing costs
  • Filter unnecessary data at forwarder level (Heavy Forwarders) to improve efficiency
  • Manage Cribl installation, configuration, and ongoing support

Stakeholder Collaboration & Support

  • Work with business stakeholders to gather security and monitoring requirements
  • Support developers and users by troubleshooting platform and data issues
  • Provide guidance on data onboarding, filtering, and optimization strategies
  • Lead Splunk POCs, implementations, and operational support initiatives

Required Qualifications

  • 8–10+ years of experience with Splunk (Engineering, Architecture, Administration)
  • Strong expertise in:
    • Splunk Enterprise architecture and clustering
    • Splunk Enterprise Security (ES)
    • Log ingestion, parsing, and data modeling
  • Experience with cloud platforms: AWS, Azure, or GCP

Preferred Qualifications

  • Splunk certifications (e.g., Splunk Architect, Splunk Admin, Power User)
  • Experience with Splunk SOAR / Phantom
  • Experience with DevSecOps and Infrastructure as Code
  • Background in enterprise data platforms and analytics

Role Overview

We are seeking an experienced Senior Cybersecurity Engineer – Splunk with deep expertise in designing, implementing, and optimizing enterprise-scale SIEM and observability platforms. This role will lead the architecture and operations of Splunk Enterprise environments, data optimization and enabling advanced security monitoring across cloud and on-prem ecosystems.

The ideal candidate will bring strong hands-on experience across Splunk architecture, cybersecurity frameworks, cloud platforms, and data engineering, with the ability to drive both strategic initiatives and day-to-day operations.

Key Responsibilities

Splunk Architecture & Engineering

  • Design, deploy, and manage enterprise-scale Splunk environments including:
    • Indexer Clusters
    • Search Head Clusters
    • License Master, Cluster Master, Deployment Server, Deployer
    • Heavy Forwarders and Universal Forwarders
  • Perform installation, configuration, and support of Splunk across Linux and Windows environments
  • Lead capacity planning and scaling strategies for Splunk infrastructure
  • Ensure high availability, performance, and resilience of the Splunk platform

Security Monitoring & SIEM Operations

  • Implement and support Splunk Enterprise Security (ES) and other premium apps (ITSI, UBA, TrackMe)
  • Develop and maintain alerts, dashboards, reports, and correlation searches
  • Troubleshoot and resolve issues related to alerts, dashboards, and search performance
  • Support SOC operations and incident response through advanced log analytics

Data Optimization

  • Design and implement pipelines for log routing, filtering, and transformation
  • Reduce data ingestion volume and optimize Splunk licensing costs
  • Filter unnecessary data at forwarder level (Heavy Forwarders) to improve efficiency
  • Manage Cribl installation, configuration, and ongoing support

Stakeholder Collaboration & Support

  • Work with business stakeholders to gather security and monitoring requirements
  • Support developers and users by troubleshooting platform and data issues
  • Provide guidance on data onboarding, filtering, and optimization strategies
  • Lead Splunk POCs, implementations, and operational support initiatives

Required Qualifications

  • 8–10+ years of experience with Splunk (Engineering, Architecture, Administration)
  • Strong expertise in:
    • Splunk Enterprise architecture and clustering
    • Splunk Enterprise Security (ES)
    • Log ingestion, parsing, and data modeling
  • Experience with cloud platforms: AWS, Azure, or GCP

Preferred Qualifications

  • Splunk certifications (e.g., Splunk Architect, Splunk Admin, Power User)
  • Experience with Splunk SOAR / Phantom
  • Experience with DevSecOps and Infrastructure as Code
  • Background in enterprise data platforms and analytics
Education:Employment Type: FULL_TIME
IntraEdge logo

About IntraEdge

Sourced by ZipRecruiter

At heart, we are a technology, products and services organization In our soul, it’s the people who make us what we are — the professionals we train and connect to next-level opportunities and the experts who create innovative solutions and value for our national and international partners. It’s true that innovative technology can provide a major boost to your business, but you also need the right talent pushing it forward. This critical combination is what we offer all of our partners: cutting edge tech solutions and the expertise to bring it to life.

Industry

It services

Company size

1,001 - 5,000 Employees

Headquarters location

Chandler, AZ, US

Year founded

2002

Social media

Instagram

View All IntraEdge Jobs

Apply