Splunk Engineer – SIEM Implementation (Contract)

About the role

Impaktum, an IT outsourcing and solutions company based in Skopje, is looking for an experienced Splunk Engineer to support the implementation phase of an on-premises SIEM project for a client in the financial sector. The work is based on Splunk Enterprise and Splunk Enterprise Security (ES). It is a short-term, fully remote contract, not a permanent position, starting in November 2026 and lasting per project.

Key responsibilities

• Deploy and configure Splunk Enterprise components (indexers, search heads, forwarders) according to the agreed design.
• Install and configure Splunk Enterprise Security.
• Onboard log sources such as firewalls (Cisco ASA / Firepower), EDR, Windows servers and Microsoft cloud services.
• Develop and tune correlation searches, alerts, dashboards and security use cases.
• Support testing and UAT and document the implemented solution for handover.

Required profile

• 3-5 years of hands-on Splunk experience, including distributed Splunk Enterprise deployments.
• Ability to work independently in a remote setup during CET business hours.
• Excellent command of English.

Required skills

• Hands-on experience with Splunk Enterprise Security (ES).
• Strong SPL and data onboarding skills.
• Nice to have: SIEM use cases in banking or other regulated environments, Splunk certifications, Python scripting.

To apply, send your CV or LinkedIn profile, a short summary of your Splunk and ES experience, your availability, expected rate (hourly or daily) and whether you work as an independent contractor or through a company.