Cyber Security Architect/Engineer III

Position Title: Cyber Security Architect/Engineer III (Splunk Cyber Security SME)

Location: Remote (U.S.)

Clearance Requirements: Must be eligible to obtain and maintain a Public Trust Clearance

Position Status: Contract

Position Description:

Seneca Resources is seeking a highly skilled Splunk Cyber Security Subject Matter Expert (SME) to support a large-scale enterprise cybersecurity and observability environment. This role is ideal for a seasoned Splunk Engineer/Architect with deep expertise in Splunk Enterprise, security monitoring, log management, automation, cloud integration, and platform engineering. The successful candidate will lead the design, implementation, administration, optimization, and operational support of enterprise Splunk environments spanning both on-premises and cloud infrastructure. This individual will collaborate closely with cybersecurity, DevOps, infrastructure, and operations teams to ensure high availability, scalability, security, and performance across mission-critical logging and monitoring platforms. This role requires hands-on engineering experience supporting large enterprise Splunk deployments, with opportunities to contribute to automation, AI-driven operations, observability, and cybersecurity initiatives.

Key Responsibilities:

• Design, deploy, configure, and maintain enterprise Splunk Enterprise environments across hybrid cloud and on-premises infrastructure.
• Architect scalable logging, monitoring, alerting, and reporting solutions that support enterprise cybersecurity and operational monitoring.
• Develop and optimize complex Splunk Search Processing Language (SPL) searches, dashboards, reports, and correlation rules.
• Manage Splunk knowledge objects including fields, field extractions, lookups, event types, tags, macros, aliases, workflow actions, and configuration files.
• Design and implement automated workflows using scripting, REST APIs, and configuration management to improve operational efficiency.
• Troubleshoot complex data ingestion, indexing, parsing, forwarding, and performance issues across enterprise environments.
• Perform Splunk platform upgrades, patching, performance tuning, health monitoring, and capacity planning.
• Integrate Splunk with cloud platforms including AWS, Microsoft Azure, and Google Cloud Platform (GCP).
• Implement and maintain secure Splunk architectures utilizing role-based access control (RBAC), security best practices, and compliance standards.
• Support onboarding of new data sources, users, applications, and enterprise security use cases.
• Collaborate with cybersecurity, DevOps, infrastructure, and engineering teams to improve enterprise observability and threat detection capabilities.
• Mentor junior engineers and provide technical leadership across Splunk engineering initiatives.
• Participate in planned maintenance windows, including occasional after-hours and weekend support.

Required Skills/Education:

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related technical discipline.

• Candidates with a non-related degree must possess four additional years of relevant professional experience.

• Minimum 8 years of overall IT experience supporting enterprise infrastructure, cybersecurity, or observability platforms.

• Minimum 5 years of hands-on Splunk Enterprise engineering and administration experience.

• Extensive experience designing, deploying, configuring, and maintaining large-scale enterprise Splunk environments.

• Advanced proficiency writing complex Splunk SPL searches, dashboards, alerts, reports, and visualizations.

• Experience managing Splunk knowledge objects and configuration files across recent Splunk Enterprise releases.

• Strong experience with Splunk deployment architecture, indexing, forwarding, clustering, search heads, and configuration management.

• Experience integrating Splunk using REST APIs and external systems.

• Strong analytical and troubleshooting skills with expertise in resolving data ingestion, parsing, indexing, and search performance issues.

• Experience developing automation workflows and operational dashboards.

• Excellent written and verbal communication skills with the ability to communicate technical concepts to technical and executive stakeholders.

• Self-motivated with strong problem-solving skills and the ability to work independently.

• Must be eligible to obtain and maintain a Public Trust Clearance.

About Seneca Resources

At Seneca Resources, we are more than just a staffing and consulting firm-we are a trusted career partner. With offices across the U.S. and clients ranging from Fortune 500 companies to government organizations, we provide opportunities that help professionals grow their careers while making an impact. When you work with Seneca, you're choosing a company that invests in your success, celebrates your achievements, and connects you to meaningful work with leading organizations nationwide. We take the time to understand your goals and match you with roles that align with your skills and career path. Our consultants and contractors enjoy competitive pay, comprehensive health, dental, and vision coverage, 401(k) retirement plans, and the support of a dedicated team who will advocate for you every step of the way. Seneca Resources is proud to be an Equal Opportunity Employer, committed to fostering a diverse and inclusive workplace where all qualified individuals are encouraged to apply.