Splunk Architect
Remote contract role (2–3 months, extendable) for a Splunk Architect who designs and optimises Splunk-based log management and SIEM solutions — data ingestion/cost optimisation, indexing strategies, security-tool integrations, and leading a small team. Core tech: Splunk Cloud/ES, Cribl, Splunk DMX, AWS/Azure, Python/Bash/PowerShell. Must be Australia-based.
- Compensation
- Not disclosed
- Location
- United States
- Work setup
- Remote
- Seniority
- Not specified
- Employment
- Contract
- Experience
- 5+ years
- Category
- Architecture
- Posted
Skills
Must have
- 5+ years of experience designing and implementing Splunk architectures
- Strong understanding of Splunk Cloud, Splunk Enterprise Security (ES), and log management best practices
- Hands-on experience with Splunk data ingestion, parsing, and indexing
- Expertise in data modelling, CIM compliance, and SIEM integrations
- Experience with AWS, Azure, or other cloud environments
- Familiarity with log pipeline tools such as Cribl or Splunk DMX
- Knowledge of scripting languages (Python, Bash, PowerShell) for automation
- Strong problem-solving and communication skills
- Must be based in Australia and pass police clearance
Full description
This is a remote position.
Location: Remote / Hybrid (as required by project) Australia based Contract Duration: 2-3 months (extendable) Rate: Competitive, based on experience
Role Summary:
The Splunk Architect will be responsible for designing, optimising, and implementing Splunk-based solutions to enhance log management, security monitoring, and operational intelligence. The role will require deep expertise in Splunk architecture, data ingestion strategies, and SIEM integration, ensuring a scalable and cost-effective logging strategy. Data ingest optimisation skills are essential. You must be based in Australia and pass police clearance.
##
Key Responsibilities:
- Identify data optimisation opportunities in data pipelines to ensure cost-effective data storage and retrieval.
- Work closely with security teams and stakeholders to develop logging strategies aligned with compliance and security needs.
- Lead the implementation of data filtering, indexing strategies, and storage optimisations.
- Integrate Splunk with other data sources and security tools to support threat detection and incident response.
- Provide recommendations for Splunk licensing optimisation and cost reduction.
- Design and implement Splunk architectures to support log ingestion, processing, and analysis at scale.
- Develop and document Splunk architecture, best practices, and operational runbooks.
- Lead troubleshooting efforts for performance and ingestion issues.
- Evaluate and implement Splunk add-ons such as Splunk DMX and Cribl to improve data processing.
- Lead a small team to implement optimisations and other tasks
Requirements
##
Required Skills & Experience:
- 5+ years of experience in designing and implementing Splunk architectures.
- Strong understanding of Splunk Cloud, Splunk Enterprise Security (ES), and log management best practices.
- Hands-on experience with Splunk data ingestion, parsing, and indexing.
- Expertise in data modelling, CIM compliance, and SIEM integrations.
- Experience with AWS, Azure, or other cloud environments.
- Familiarity with log pipeline tools such as Cribl or Splunk DMX.
- Knowledge of scripting languages (Python, Bash, PowerShell) for automation.
- Strong problem-solving and communication skills.