Senior Engineer Splunk Engineer

Presidio, Where Teamwork and Innovation Shape the Future
At Presidio, we’re at the forefront of a global technology revolution, transforming industries through cutting-edge digital solutions and next-generation AI. We empower businesses—and their customers—to achieve more through innovation, automation, and intelligent insights.

The Role
This role balances coding and system administration concepts with thought leadership, ensuring Splunk is reliable, efficient, and driving value for customers. It’s ideal for someone with 2-4 years of hands-on Splunk experience and proven success in deploying Splunk solutions and driving innovation in data platforms. Advanced foundational IT knowledge—such as operating systems, networking, and security concepts—is critical to the success of this role.

A Senior Splunk Developer will spend most of their time writing and validating code that will run on or integrate with the Splunk platform. They will work with the product and architect team to understand requirements and turn those requirements into functional and deliverable software solutions. The Senior Splunk Developer will help to manage the SDLC of the solutions being developed to ensure that software releases align with the release plan for both planned releases and unplanned software fixes.

Senior Developers will bring ideas to the team and help to create plans that drive technical innovation, improve solution design, and align solutions with business priorities.

Core Skills

Splunk

These are the baseline Splunk capabilities this role should have to be successful in this role:

• Search & Dashboard Optimization
  • Write and review complex SPL, ensuring searches are efficient, modular, and reusable
  • Design interactive dashboards that scale across large user bases.
• Knowledge Object Lifecycle Management
  • Establish governance, oversee naming conventions, and manage knowledge objects across multiple apps.
  • Create complex field extractions (regex, delimiter-based)
  • Apply knowledge objects to make data reusable and sharable.
• Dashboards & Visualizations
  • Create complex dashboards using Simple XML, SplunkJS, Dashboard Studio, or React JS.
  • Knowledge of performant Splunk dashboard design principles.
• Data Onboarding & Transformation
  • Design onboarding workflows, create and validate source types, and ensure CIM compliance for new data sources.
  • Able to perform intermediate to advanced troubleshooting.
• System Administration
  • Experience managing Splunk environments and familiarity with vendor recommended management best practices.
  • Knowledge of how to manage Splunk apps, indexes, permissions, and knowledge bundles with an eye on performance and maintainability.
• Monitoring & Troubleshooting
  • Use Splunk logs and the Monitoring Console to diagnose ingestion, indexing, and search issues at scale.
  • SPL troubleshooting to ensure that it is optimized for performance and will run optimally in a customer’s Splunk environment.
• Git Version Control
  Senior developers should be experts in branch management, resolving complex conflicts, and establishing repository standards. They are expected to oversee code reviews, enforce quality, and design CI/CD integrations for Splunk apps.
• Python Scripting
  Advanced Python scripting is key for creating modular inputs, custom commands, or Splunk SDK integrations. Senior developers should also apply secure coding practices and help optimize performance for production workloads.
• React UX Development
  Ability to build sophisticated, performant user experiences using React. Senior developers should architect component libraries, enforce design standards, and mentor juniors on front-end best practices.
• AI Knowledge
  Senior developers should have intermediate knowledge of AI and machine learning concepts, with the ability to design and implement custom AI solutions. This includes leveraging the Splunk AI Toolkit and integrating external AI/ML frameworks or APIs. Senior developers are expected to guide AI adoption strategies, mentor junior staff on practical applications, and ensure AI solutions align with business outcomes while remaining efficient and explainable. They should also be familiar with agentic AI approaches, where AI agents autonomously orchestrate Splunk tasks, streamline workflows, and interact with external systems to improve automation and decision-making.

Advanced Splunk Skills (Intermediate to Advanced Level)

• Lookup & KV Store Read/Update/Join
  Deep experience managing and automating KV store operations. Senior developers may design lookup structures to support application logic.
• Splunk REST Commands
  Ability to design complex searches using REST APIs for large-scale administration and app integration.
• Tstats Searches
  Expertise in crafting optimized tstats queries to support high-volume, real-time dashboards and enterprise apps.
• Data Models
  Senior developers should design, accelerate, and maintain data models when applicable, balancing performance with storage cost.
• Metric Indexes
  Ability to structure, manage, and optimize metric data for telemetry-heavy environments.
• Summary Collection Searches / Managing Summary Indexes
  Essential skill for optimizing resource usage and scaling searches. Senior developers should design summary indexing strategies to offload heavy searches and maintain historical reporting without license strain.

Splunk Certifications

• Splunk Power User
  Demonstrates knowledge of search, reporting, and basic dashboard creation. This ensures new developers can contribute meaningfully to user-facing Splunk tasks early on.
• Splunk Admin
  Validates skills in managing users, indexes, and basic configuration tasks. A junior developer with this certification can confidently support Splunk environments at an administrative level.
• Splunk Cloud Admin
  Validates skills in managing users, indexes, and basic configuration tasks in a Splunk Cloud environment. An engineer with this certification can confidently support Splunk Cloud environments at an administrative level.
• Splunk Enterprise Security Admin (strongly recommended)
  Splunk Enterprise Security (ES) is a SIEM that runs on the Splunk platform. The ES Admin exam verifies a candidate’s ability to configure ES, manage correlation searches and notables, maintain data models, and support the day-to-day operation of a SOC using Splunk ES. Having this certification demonstrates readiness to assist with security content management, incident workflows, and ES-specific administration.
• Splunk Architect
  The architect certification demonstrates mastery of scaling, clustering, and distributed Splunk design. It is essential for senior developers creating solutions for enterprise environments.

Your future at Presidio
Joining Presidio means stepping into a culture of trailblazers—thinkers, builders, and collaborators—who push the boundaries of what’s possible. With our expertise in AI-driven analytics, cloud solutions, cybersecurity, and next-gen infrastructure, we enable businesses to stay ahead in an ever-evolving digital world.

Here, your impact is real. Whether you're harnessing the power of Generative AI, architecting resilient digital ecosystems, or driving data-driven transformation, you’ll be part of a team that is shaping the future.

Ready to innovate? Let’s redefine what’s next—together.

About Presidio
At Presidio, speed and quality meet technology and innovation. Presidio is a trusted ally for organizations across industries with a decades-long history of building traditional IT foundations and deep expertise in AI and automation, security, networking, digital transformation, and cloud computing. Presidio fills gaps, removes hurdles, optimizes costs, and reduces risk. Presidio’s expert technical team develops custom applications, provides managed services, enables actionable data insights and builds forward-thinking solutions that drive strategic outcomes for clients globally. For more information, visit www.presidio.com.

Presidio is committed to hiring the most qualified candidates to join our amazing culture. We aim to attract and hire top talent from all backgrounds, including underrepresented and marginalized communities. We encourage women, people of color, people with disabilities, and veterans to apply for open roles at Presidio. Diversity of skills and thought is a key component to our business success.

Recruitment Agencies, Please Note: Presidio does not accept unsolicited agency resumes/CVs. Do not forward resumes/CVs to our careers email address, Presidio employees or any other means. Presidio is not responsible for any fees related to unsolicited resumes/CVs.