$140,000–$180,000 Per Year
Architectural Design, Best Practices, Enterprise Protection, Forwarder, High Availability, Hybrid Cloud, Incident Response, Internet Security, Onboarding, Operational Support, Performance Tuning/Optimization, Reporting Dashboards, Search Engine Optimization (SEO), Secret Clearance, Security Information and Event Management (SIEM), Security Monitoring, Splunk, Systems Administration/Management, Use Cases
Piper Companies is seeking a Splunk Engineer / Architect to support a leading organization in the cybersecurity and enterprise technology industry. The Splunk Engineer / Architect will play a critical role in designing, implementing, and optimizing enterprise-scale Splunk environments within a SOC, with a strong focus on backend engineering and architectural design rather than dashboarding or end-user analytics. The Splunk Engineer/Architect is a long term contract opportunity, requires an active Secret Clearance and requires you to work onsite 5 days per week in RTP, NC.
Responsibilities of the Splunk Engineer / Architect:
- Design and deploy scalable, highly available Splunk architectures across on-prem, cloud, and hybrid environments.
- Lead Splunk engineering efforts including installation, configuration, upgrades, and ongoing platform maintenance (indexers, search heads, forwarders, clustering).
- Develop and execute data ingestion strategies, including onboarding, normalization, parsing, and performance optimization.
- Establish governance, platform standards, and best practices to ensure long-term scalability and reliability.
- Support SOC operations by building and tuning SIEM use cases, correlation searches, and alerts aligned with MITRE ATT&CK.
- Collaborate with cybersecurity and infrastructure teams to enhance threat detection, monitoring, and incident response capabilities.
Requirements of the Splunk Engineer / Architect:
- Active Secret Clearance required.
- 5+ years of hands-on Splunk Engineering/Architecture experience (backend focus, not dashboarding).
- Strong expertise with Splunk Enterprise and Splunk Enterprise Security (ES) in large-scale environments.
- Deep understanding of data ingestion, indexing, clustering (indexer/search head), and search optimization.
- Experience supporting Splunk within a SOC and contributing to SIEM/security monitoring strategies.
Compensation for the Splunk Engineer / Architect:
- $140,000-$180,000
- Full Comprehensive Benefits: Health, Vision, Dental, PTO, Paid Holiday and Sick Leave if Required by Law.
Keywords: Splunk, Splunk Engineer, Splunk Architect, SIEM, Splunk Enterprise, Splunk ES, Security Operations Center, SOC, data ingestion, indexer clustering, search head clustering, MITRE ATT&CK, threat detection, logging strategy, monitoring, cybersecurity, backend Splunk engineering, RTP jobs, active secret clearance
This job opens for applications on 07/10/2026. Applications for this job will be accepted for at least 30 days from the posting date.
#LI-AG1
#ONSITE