Software Engineer Expert with Security Clearance
Cornerstone Defense · Herndon, VA · 1 mo ago
EngineeringFull-time
About the role
We are actively seeking Systems Engineers to perform as a Splunk Cloud engineer with a minimum of 11 years experience. The ideal candidate will have a Bachelor’s or Master’s degree in Information Technology or Engineering, and at least 6+ years of experience working with Splunk, with at least 3 years on Splunk Cloud or large Splunk Enterprise deployments.
Responsibilities
- Experience integrating diverse data streams
- Experience with data transfer tools (Ex: NiFi, Cribl, etc)
- Establishes data standards and acts as custodian of IT and service delivery data sets and streams
- Experience in analyzing complex networks and systems
- Experience in analyzing log data from various network components and operating systems
- Knowledge of complex environments involving shared networks and multiple security enclaves
- Systems Engineer with Data Engineer background
- Ability to manage and troubleshoot data feeds
- Splunk familiarization
- Python
Requirements
- Required Qualifications: 6+ years working with Splunk or Splunk Certifications, with at least 3 years on Splunk Cloud or large Splunk Enterprise deployments.
- Technical Skills: Expert SPL, knowledge of Splunk apps (Enterprise Security, ITSI, DB Connect), forwarder architectures, indexer/search head concepts.
- Cloud & Observability: Hands on experience onboarding data from AWS, Azure, and/or GCP; familiarity and observability tooling.
- Automation: Proficiency CloudFormation and experience integrating Splunk deployments into CI/CD.
- Scripting: Strong Python and Bash skills for automation, integrations, and ingestion pipelines.
- Security Knowledge: Understanding of logging best practices, log retention requirements, secure transport, and common compliance frameworks.
- Soft Skills: Strong troubleshooting, stakeholder communication, project leadership, and mentoring capability.
Preferred Qualifications
- Splunk Certified Cloud Architect, Splunk Certified Admin, or Splunk Certified Power User.
- Cloud certifications (AWS/Azure/GCP).
- Experience with observability frameworks (OpenTelemetry), metrics pipelines, and metric-to-log correlation.
- Prior experience operating at enterprise scale (multi TB ingestion/day, global deployments).
- Proficiency with Terraform, Ansible, or similar IaC tools and experience integrating Splunk deployments into CI/CD.