Splunk Developer

• Practice Development & Integration

• Technologies Development Skills

• Location Chicago, United States

• Type Contract

Splunk Developer

Location: Chicago, IL (Hybrid or On-site)

About the Role

A leading credit card and payments organization is seeking a Splunk Developer to help design, build, and maintain enterprise-scale observability, monitoring, and security analytics solutions. In this role, you’ll work closely with engineering, infrastructure, and security teams to transform high-volume transactional and system data into actionable insights.

This is a hands-on role focused on Splunk development, data onboarding, dashboarding, alerting, and performance optimization in a highly regulated financial environment.

What You’ll Do

• Design, develop, and optimize Splunk dashboards, reports, and alerts for operational, application, and security monitoring

• Write and optimize complex SPL (Search Processing Language) queries

• Build and maintain Splunk apps and add-ons, including custom field extractions and data models

• Onboard and normalize data from multiple sources (applications, APIs, cloud platforms, databases, security tools)

• Configure and manage Splunk forwarders (Universal and Heavy)

• Support incident response, root-cause analysis, and compliance reporting

• Partner with infrastructure, DevOps, and security teams to improve observability and system reliability

• Ensure Splunk environments meet performance, scalability, and security best practices

What You’ll Bring

• 3+ years of hands-on Splunk development experience

• Strong proficiency in SPL, dashboards, alerts, and visualizations

• Experience with data onboarding, parsing, and transformations (props.conf, transforms.conf)

• Solid scripting skills in Python and/or Bash

• Experience working in Linux-based environments

• Familiarity with REST APIs and integrating external data sources

• Understanding of log management, monitoring, and observability concepts

• Experience working with high-volume transactional data in financial or regulated environments

Nice to Have

• Experience with Splunk Enterprise Security (ES) or security use cases

• Familiarity with cloud platforms (AWS, Azure, or GCP)

• Experience with CI/CD, Git, and infrastructure-as-code tools

• Knowledge of PCI DSS, SOX, or financial services compliance

• Exposure to Kafka, streaming data, or real-time analytics

Why This Role

• Work on mission-critical systems supporting payment and credit card transactions

• Collaborate with experienced engineers in a data-driven environment

• Competitive compensation, strong benefits, and long-term growth opportunities

• Chicago-based role with flexibility depending on team needs

• share
• 
• 
• 
•