bluedoor data·Job Postings API·bluedoor.sh ↗

HomeCompaniesTruezerotechSplunk Engineer - Core Consultant Certified/ES Accreditation (R-00041)

Splunk Engineer - Core Consultant Certified/ES Accreditation (R-00041)

Truezerotech · 100% Remote · Remote · Active · Lever

Job facts

FieldValue
CompanyTruezerotech
TitleSplunk Engineer - Core Consultant Certified/ES Accreditation (R-00041)
Normalized title-
Department / teamEngineering & Architecture / Data/Analytics
LocationUnited States
Work modelRemote / Remote
Employment typeFull Time
Salary-
Statusactive
ATS providerLever
Posted / first seen2025-01-23 / 2026-05-29
Changed / last seen2026-05-29 / 2026-06-19

Related slices

PageWhat it containsOpen
Company jobsActive postings from Truezerotech.Open
Company breakdownsRole, location, ATS, and work model facets for this company.Open
ATS provider jobsActive postings observed through Lever.Open
Provider filtered searchThe same provider as a filtered job collection.Open
Department jobsActive postings in Engineering & Architecture.Open
Work model jobsActive Remote postings.Open
Lifecycle eventsOpen, update, close, and reopen events for this posting.Open
Original postingCanonical source or apply URL captured from the ATS.Open

Linked records

CompanyTruezerotech
Sourcefd7b3fad-f07f-4438-ad90-754976718dfe
ATS providerLever

Description

True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that said outcomes begin and end with our people, and that is what we have built, a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top tier services to our customers. In 2023, True Zero was recognized as a “Best Places to Work” in two categories ("Prosperous and Thriving" ($5MM – $50MM in gross revenue) and "Mid-Atlantic Region" (DC, DE, MD, NC, VA, WV)) and in 2022, was recognized as one of Inc. Magazine’s Top 5000 Fastest Growing Companies. The candidate will be part of a team of Splunk Engineers maintaining various clients' Splunk instances with a heavy emphasis on data on-boarding, content development, reporting, and visualizations. All candidates must possess prior Splunk engineering and administration experience, meet the necessary certification prerequisites, and work well in a team environment. Candidates with backgrounds supporting federal customers is a plus. As a TZT consultant, the candidate will receive access to the full knowledge base which is driven by the True Zero community as well as the technical backing of the entire PS team. True Zero encourages collaboration and growth through information sharing and knowledge workshops. The candidate will also have access to our internal Slack channel to stay connected with the team as well as the necessary tools to train, demo, test and grow their professional skills. We’re actively searching for talented security and technology practitioners who are ready to experience the True Zero difference. As a True Zero team member, you'll enjoy: - Competitive salary, paid twice per month - Best in class medical coverage - 100% of medical premiums covered by True Zero - Company wide new business incentive programs - Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.) - 3 weeks of PTO starting + 11 Paid Holidays Annually - 401k Program with 100% company match on the first 4% - Monthly reimbursement of Cell Phone and Home Internet costs - Paternity/Maternity Leave - Investment in training and certifications to broaden and deepen your technical skills Qualification Requirements Splunk Consultant Certification Splunk ES Accreditation Experience with RBA is highly suggessted Ability to steer IT environments lowering operational risk, challenges, and enhancing service performance. Experience designing and implementing ground up distributed Splunk installations including all Splunk server roles (Search Head, Indexers, Heavy Forwarders and Universal Forwarders, etc.) Experience with advanced configuration of Splunk including Indexer Clustering and Search Head Clustering. Experience maintaining and administering enterprise Splunk implementations. Experience developing custom Splunk content including scheduled searches, reports, dashboards, etc. Proficient at data on-boarding activities including custom parsing rules, custom Technology Add-On building according to Splunk's Common Information Model (CIM). Experience configuring indexes, index routing, retention policies, etc. Experience working in linux and windows environments, ability to configure: Storage subsystems (I.e. partitioning, Volume Groups, Logical Volumes, etc.) SELinux Familiarity with different flavors of Linux distros (RedHat, CentOS, Ubuntu, etc.) File Permission Settings (linux/windows) Excellent written and oral skills, ability to work closely with multiple customers, manage expectations, and track engagement scope.

Full job record

Job IDcd80f1d491a526bb7118f38999b350063964aad8
Org ID7db049a1-c308-497e-8ef0-4ae8ac5e3083
Source IDfd7b3fad-f07f-4438-ad90-754976718dfe
Board IDfd7b3fad-f07f-4438-ad90-754976718dfe
Providerlever
Provider Job Keydf47bc23-bdfb-463f-b9cc-50adfeb62744
TitleSplunk Engineer - Core Consultant Certified/ES Accreditation (R-00041)
Normalized Title
Statusactive
Activeyes
Location Text100% Remote
DepartmentEngineering & Architecture
TeamData/Analytics
Employment TypeFull-Time
Workplace Typeremote
Remote Policyremote
CountryUnited States
Region
City
Salary Raw
Salary Min
Salary Max
Salary Currency
Salary Period
Source URLhttps://jobs.lever.co/truezerotech/df47bc23-bdfb-463f-b9cc-50adfeb62744
Apply URLhttps://jobs.lever.co/truezerotech/df47bc23-bdfb-463f-b9cc-50adfeb62744/apply
First Seen At2026-05-29 07:10:49Z
Last Seen At2026-06-19 07:58:13Z
Last Checked At2026-06-19 07:58:13Z
Last Changed At2026-05-29 07:10:49Z
Inactive At
Source Posted At2025-01-23 00:57:41Z
Source Updated At
Raw Payload Uris3://job-postings-prod-raw-590183727216/raw/provider=lever/board=truezerotech/date=2026-06-19/2026-06-19T07-58-12-784Z-f1cae034ded758bb9d556db768823bbf011bb0ea887f801933f5f9161f0c85c3.json
Event Fields
{
  "content_hash": "561ece14a3497e9f5a8368104d409c39d8cdb6faf4b6defcf3e535fb76e94028",
  "source_hash": "a5bb47ca42ed3fe5b472890ec3282c0f9af54805c84074c0da94554e32046e26",
  "last_changed_at": "2026-05-29T07:10:49.241Z",
  "active_status": "active"
}
Parsed Structured
{
  "language": "en",
  "location": {
    "raw": "100% Remote",
    "city": null,
    "region": null,
    "country": "United States",
    "is_remote": true,
    "confidence": 0.9
  },
  "salary_max": null,
  "salary_min": null,
  "inferred_at": "2026-06-19T07:58:13.087Z",
  "launch_scope": {
    "reason": "english_us_canada",
    "included": true,
    "language": "en",
    "location": {
      "raw": "100% Remote",
      "city": null,
      "region": null,
      "country": "United States",
      "is_remote": true,
      "confidence": 0.9
    },
    "countries": [
      "United States"
    ]
  },
  "remote_policy": "remote",
  "salary_period": null,
  "workplace_type": "remote",
  "salary_currency": null
}
Extensions
{}
Native Structured
{
  "lists": [
    {
      "text": "Qualification Requirements",
      "content": "<li>Splunk Consultant Certification</li><li>Splunk ES Accreditation</li><li>Experience with RBA is highly suggessted </li><li>Ability to steer IT environments lowering operational risk, challenges, and enhancing service performance.</li><li>Experience designing and implementing ground up distributed Splunk installations including all Splunk server roles (Search Head, Indexers, Heavy Forwarders and Universal Forwarders, etc.)</li><li>Experience with advanced configuration of Splunk including Indexer Clustering and Search Head Clustering.</li><li>Experience maintaining and administering enterprise Splunk implementations.</li><li>Experience developing custom Splunk content including scheduled searches, reports, dashboards, etc.</li><li>Proficient at data on-boarding activities including custom parsing rules, custom Technology Add-On building according to Splunk's Common Information Model (CIM).</li><li>Experience configuring indexes, index routing, retention policies, etc.</li><li>Experience working in linux and windows environments, ability to configure: </li><li>Storage subsystems (I.e. partitioning, Volume Groups, Logical Volumes, etc.)</li><li>SELinux</li><li>Familiarity with different flavors of Linux distros (RedHat, CentOS, Ubuntu, etc.)</li><li>File Permission Settings (linux/windows)</li><li>Excellent written and oral skills, ability to work closely with multiple customers, manage expectations, and track engagement scope.</li>"
    }
  ],
  "country": "US",
  "createdAt": 1737593861508,
  "updatedAt": null,
  "categories": {
    "team": "Data/Analytics",
    "location": "100% Remote",
    "commitment": "Full-Time",
    "department": "Engineering & Architecture",
    "allLocations": [
      "100% Remote"
    ]
  },
  "salaryRange": null,
  "workplaceType": "remote"
}
Get this page with API

Rendered from the bluedoor Job Postings API. Reproduce it:

GET https://api.bluedoor.sh/job-postings/v1/jobs/cd80f1d491a526bb7118f38999b350063964aad8?include=descriptionJSON
GET https://api.bluedoor.sh/job-postings/v1/orgs/7db049a1-c308-497e-8ef0-4ae8ac5e3083JSON
GET https://api.bluedoor.sh/job-postings/v1/sources/fd7b3fad-f07f-4438-ad90-754976718dfeJSON
GET https://api.bluedoor.sh/job-postings/v1/jobs/cd80f1d491a526bb7118f38999b350063964aad8/eventsJSON