Splunk Consulting Engineer (TS/SCI with CI Poly) - Onsite, TX
Title: Splunk Consulting Engineer
Clearance: Active TS/SCI with active CI Poly Required
Education: Bachelor’s Degree Preferred
Years Experience: 10+ Years Technical Consulting or Big Data
Location: Onsite Lackland, Texas
August Schell is seeking an experienced, cleared Splunk Consulting Engineer to serve as a Subject Matter Expert (SME), providing senior-level technical consulting, architectural guidance, and hands-on engineering support across enterprise Splunk Core and Splunk Cloud environments.
The ideal candidate brings extensive Splunk expertise and a strong background in enterprise architecture, data onboarding, platform optimization, and troubleshooting. This individual will play a critical role in delivering reliable, scalable solutions aligned with Splunk best practices while supporting customer mission objectives.
Primary Responsibilities
Provide expert architectural guidance and hands-on technical support for enterprise Splunk Core and Splunk Cloud environments.
Design, implement, and optimize end-to-end data onboarding processes, including data flow modeling, data source integration, and database design.
Architect and manage distributed Splunk environments, including search head clustering, indexer clustering, and configuration management.
Develop and maintain high availability and disaster recovery (HA/DR) strategies to ensure platform resilience, scalability, and business continuity.
Perform Splunk index administration, maintenance, optimization, and data retention management in accordance with operational requirements and applicable federal standards.
Configure and optimize data parsing, field extractions, and Common Information Model (CIM) normalization to support accurate and consistent analytics.
Integrate, configure, and maintain Splunk-approved applications and technical add-ons (TAs) across enterprise environments.
Establish proactive platform monitoring, health checks, performance optimization, and alerting mechanisms to identify and resolve potential issues.
Develop and maintain Splunk dashboards, reports, alerts, and customer-facing visualizations that deliver meaningful, actionable insights.
Troubleshoot complex platform, data ingestion, search performance, and integration issues to maintain reliable system operations.
Collaborate with technical teams, customer stakeholders, and leadership to assess requirements, recommend solutions, and implement Splunk best practices.
Provide technical documentation, knowledge transfer, and recommendations to support ongoing platform improvements and customer mission success.
Requirements
- Active TS/SCI with current CI Polygraph.
- 10+ years of experience in technical consulting or big data.
- Splunk Core Consultant Certification.
Extensive experience with Splunk Core and Splunk Cloud environments.
Strong knowledge of Splunk architecture, configuration management, distributed search clustering, and high availability/disaster recovery (HA/DR).
Hands-on experience with data flow modeling, database design, and end-to-end data onboarding.
Experience with Splunk index maintenance, data parsing, and Common Information Model (CIM) normalization.
Proficiency working within Unix and Windows command-line interface (CLI) environments.
Scripting and development proficiency in Bash, Python, Java, or .NET.
Knowledge of federal cybersecurity standards, data retention requirements, and enterprise domain controls.
Preferred
Experience integrating Splunk-approved applications and technical add-ons (TAs).
Experience implementing proactive Splunk ecosystem monitoring and alerting mechanisms.
Experience developing front-end dashboards and customer visualizations to deliver actionable analytics.
Experience providing architectural guidance and implementing scalable, resilient Splunk platform solutions aligned with Splunk best practices.
Ability to deliver actionable analytics and technical solutions that support customer mission outcomes.
Note
This job description in no way states or implies that these are the only duties to be performed by the employee(s) of this position. Employees will be required to follow any other job-related instructions and to perform any other job-related duties requested by any person authorized to give instructions or assignments. All duties and responsibilities are essential functions and requirements and are subject to possible modification to reasonably accommodate individuals with disabilities.
Who we are...
August Schell offers 30 years of experience in providing our customers innovative solutions and engineering services to their most challenging needs. We thrive on navigating complex IT difficulties and are driven to find the best solutions for our customers. Our team delivers expert knowledge in cyber security, big data, endpoint security and cloud solutions. Our ability to serve our customers with continued excellence is a direct reflection of our dedicated and exceptional people. At August Schell, we are not only a team, we are a family.
Equal Employment Opportunity
August Schell Enterprises Inc. is an Equal Employment Opportunity Employer. We are committed to providing a workplace that is free from discrimination and harassment based on race, color, religion, sex (including pregnancy, sexual orientation or gender identity), national origin, age, marital status, disability, protected veteran status or any other characteristic protected by applicable law.
Accommodations
If you are an individual with a disability and would like to request a reasonable accommodation during the application or hiring process, please contact Human Resources at [email protected]