Engineer Splunk Engineer

Presidio, Where Teamwork and Innovation Shape the Future At Presidio, we’re at the forefront of a global technology revolution, transforming industries through cutting-edge digital solutions and next-generation AI. We empower businesses—and their customers—to achieve more through innovation, automation, and intelligent insights.  The Role The Junior Splunk Developer is an engineering position designed for individuals beginning their career in Splunk development and related technologies. This role provides the foundation for becoming a fully capable Splunk Engineer or Developer by blending technical training with hands-on project experience.  Unlike traditional IT roles, this position combines software development skills (version control, scripting, and UI development) with Splunk-specific competencies (search development, dashboard creation, data onboarding, and administrative support). A Junior Splunk Developer works under the guidance of senior engineers and architects to accelerate delivery of Splunk solutions while gaining the depth of knowledge required to grow into more advanced engineering responsibilities. Basic foundational IT knowledge—such as operating systems, networking, and security concepts—is critical to the success of this role.  A Junior Splunk Developer will spend most of their time learning the Splunk platform, writing basic searches and creating dashboards, and assisting with code that supports larger Splunk solutions. They will work closely with senior developers and architects to understand requirements and translate them into smaller, well-defined development tasks. The Junior Splunk Developer will contribute to the software development lifecycle (SDLC) by versioning their work in Git, participating in code reviews, and helping ensure deliverables meet quality standards and integrate cleanly into planned releases.  Junior Developers will bring curiosity and energy to the team and help to create plans that support solution development, optimization, and small automation tasks while building the foundation for future advanced responsibilities.  Core Skills   Splunk These are the baseline Splunk capabilities this role should have before taking on advanced engineering tasks: Searching & Reporting Write SPL queries with filters, stats, eval, and time-based commands. Build basic reports and charts to answer common business questions. Dashboards & Visualizations Create dashboards using Simple XML, SplunkJS, or Dashboard Studio. Apply panels, drilldowns, and input tokens for interactivity. Understand the fundamentals of dashboard performance optimization. Knowledge Object Management Create and manage saved searches, event types, and tags. Build and maintain simple field extractions (regex, delimiter-based). Apply knowledge objects to make data reusable and shareable. Splunk Deployment Topology Awareness An understanding of the basic Splunk components: Forwarders, Indexers, Search Heads. Knowledge of Splunk deployment architecture and the associated best practices. Data Onboarding Basics Understand source types, index-time vs. search-time fields. Know how data is forwarded, indexed, and made searchable. Able to perform basic to intermediate troubleshooting. Splunk Admin Fundamentals Add/manage users and roles with appropriate permissions. Understand indexes, retention policies, and storage basics. Navigate Monitoring Console for health checks. Git Version Control Comfort with branching, merging, and resolving conflicts is critical. Junior developers should understand pull requests and code reviews, ensuring their work is versioned properly and integrated cleanly into larger projects. Basic knowledge of CI/CD pipelines and how Git repositories tie into deployments is a plus. Python Scripting Ability to write small automation scripts, transform data, or build Splunk custom commands in Python. Knowledge of Python libraries commonly used in data handling will help streamline workflow. Junior developers should be able to troubleshoot errors and understand best practices around virtual environments and package management. React UX Development Familiarity with building front-end features using React, focusing on reusable components and clean user interfaces. Understanding props, state management, and basic API integration is expected. A junior developer should be ready to collaborate closely with designers and senior engineers to implement mockups accurately. AI Knowledge Junior developers should have a basic awareness of how AI and machine learning concepts apply to Splunk. This includes understanding pre-built machine learning toolkits, anomaly detection, and predictive models within Splunk. They should be able to use existing AI/ML features, follow best practices for applying them to dashboards and searches, and collaborate with senior developers when integrating AI into Splunk workflows. Exposure to agentic AI concepts will help juniors understand how Splunk can evolve to support next-generation operations. Advanced Splunk Skills (Exposure Level)   Lookup & KV Store Read/Update/Join Junior developers should understand how to enrich search results with external data and maintain small KV stores. They’ll learn how lookups power better reporting and reduce search-time complexity. Splunk REST Commands Ability to read Splunk’s REST API documentation and execute basic queries to interact with saved searches, indexes, or configuration. This skill enables automation and integration with other tools. Tstats Searches Knowledge of tstats for efficient, high-performance searches on indexed data. Even at a junior level, understanding tstats helps build optimized dashboards. Data Models Familiarity with accelerated data models. Juniors won’t architect models, but they should be able to leverage existing ones effectively. Metric Indexes Awareness of metric data structure and benefits over event indexing. This is especially relevant for environments heavy in performance or telemetry data. Splunk Certifications   Splunk Power User Demonstrates knowledge of search, reporting, and basic dashboard creation. This ensures new developers can contribute meaningfully to user-facing Splunk tasks early on. Splunk Admin Validates skills in managing users, indexes, and basic configuration tasks. A junior developer with this certification can confidently support Splunk environments at an administrative level. Splunk Cloud Admin Validates skills in managing users, indexes, and basic configuration tasks in a Splunk Cloud environment. A junior developer with this certification can confidently support Splunk Cloud environments at an administrative level. Splunk Enterprise Security Admin (recommended) Splunk Enterprise Security (ES) is a SIEM that runs on the Splunk platform. The ES Admin exam verifies a candidate’s ability to configure ES, manage correlation searches and notables, maintain data models, and support the day-to-day operation of a SOC using Splunk ES. Having this certification demonstrates readiness to assist with security content management, incident workflows, and ES-specific administration. Your future at Presidio Joining Presidio means stepping into a culture of trailblazers—thinkers, builders, and collaborators—who push the boundaries of what’s possible. With our expertise in AI-driven analytics, cloud solutions, cybersecurity, and next-gen infrastructure, we enable businesses to stay ahead in an ever-evolving digital world.  Here, your impact is real. Whether you're harnessing the power of Generative AI, architecting resilient digital ecosystems, or driving data-driven transformation, you’ll be part of a team that is shaping the future.  Ready to innovate? Let’s redefine what’s next—together.  About Presidio At Presidio, speed and quality meet technology and innovation. Presidio is a trusted ally for organizations across industries with a decades-long history of building traditional IT foundations and deep expertise in AI and automation, security, networking, digital transformation, and cloud computing. Presidio fills gaps, removes hurdles, optimizes costs, and reduces risk. Presidio’s expert technical team develops custom applications, provides managed services, enables actionable data insights and builds forward-thinking solutions that drive strategic outcomes for clients globally.