Principal Architect, Splunk

Norcross
Norcross, GA
6075 The Corners Pkwy
Norcross, GA 30092, USA

At Presidio, we’re at the forefront of a global technology revolution, transforming industries through cutting‑edge digital solutions and next‑generation AI. We empower businesses—and their customers—to achieve more through innovation, automation, and intelligent insights.

We are seeking a highly skilled Principal Architect with deep expertise in Splunk architecture, engineering, and implementation to join our Professional Services organization. This role is both technical and strategic and is responsible for leading complex customer engagements, advising executives and technical stakeholders, and ensuring successful deployments of Splunk‑based solutions.

The Principal Architect brings senior‑level engineering expertise, thought leadership, and a customer‑first mindset. You will serve as a trusted advisor, guiding customers through best practices, data strategy, operational maturity, and long‑term value realization from their Splunk investments.

• Lead end‑to‑end delivery of Splunk Professional Services engagements, including architecture design, implementation, optimization, and troubleshooting.
• Serve as the primary technical point of contact for customers throughout the engagement lifecycle.
• Conduct discovery workshops to understand business goals, data sources, and operational challenges.
• Translate customer requirements into scalable, secure, and performant Splunk solutions.
• Deliver high‑quality documentation, diagrams, runbooks, and knowledge transfer sessions.
• Technical Expertise
  • Architect and deploy complex Splunk Enterprise and Splunk Cloud environments.
  • Develop advanced searches, dashboards, alerts, and custom visualizations.
  • Create and tune props/transforms, CIM mappings, data onboarding configurations, and TA customizations.
  • Integrate Splunk with external systems including security tools, cloud platforms, and SIEM/SOAR solutions.
  • Troubleshoot performance issues, ingestion gaps, and search inefficiencies in large, distributed environments.
  • Apply Splunk best practices for scaling, clustering, security, data retention, and platform governance.
• Thought Leadership & Advisory
  • Act as a strategic advisor to senior customer stakeholders, helping them mature their Splunk practice.
  • Recommend operational models, use cases, dashboards, data strategies, and governance frameworks.
  • Provide guidance on observability, security analytics, IT operations, or business analytics depending on customer need.
  • Mentor junior engineers and consultants on Splunk practices and delivery excellence.
• Project & Stakeholder Management
  • Partner with Project Managers to ensure on‑time, on‑scope delivery with exceptional customer satisfaction.
  • Communicate technical risks, issues, and recommendations in a clear, executive‑ready manner.
  • Contribute to scoping, level‑of‑effort estimates, and Statements of Work (SOWs).
  • Work closely with the Account Executive/Account Manager to identify expansion opportunities, support account growth strategies, and help drive additional business within the customers you serve.

• Bachelor’s degree or equivalent experience and/or military experience
• 7+ years of relevant industry experience, with a demonstrated track record delivering solutions in complex, enterprise environments
• Expertise across Splunk Enterprise, Splunk Cloud, and associated components (indexers, SHC, deployment server, ingestion pipelines).
• Proven experience delivering customer‑facing Professional Services or consulting engagements.
• Deep knowledge of SPL, data modeling, CIM, and advanced dashboarding.
• Strong understanding of Linux, networking fundamentals, scripting languages (Python, Bash), and cloud platforms (AWS/Azure/GCP).
• Ability to clearly articulate complex technical concepts to both technical and non‑technical audiences.
• Strong troubleshooting skills and experience with large‑scale distributed environments.

• Splunk certifications (Architect, Consultant II, ES/SOAR certifications, or O11Y certifications).
• Experience with Splunk…