Senior Systems Engineer - Splunk

  • Location: Chicago
  • Department: Internal Technology
  • Work Status: Full-time

Overview

At Relativity, we make software to help users organize data, discover the truth, and act on it. Our e-discovery platform is used by more than 13,000 organizations around the world to manage large volumes of data and quickly identify key issues during litigation, internal investigations, and compliance projects.

Here you can own your career in a community of values-driven people who help our customers around the world solve complex data challenges. If this sounds like the place for you, check out the details of this position below.

As a Senior Systems Engineer focusing on Splunk, you will help design, build, manage, and maintain Relativity’s logging and alerting infrastructure to provide insights into systems performance, security, and troubleshooting. You’ll work across multiple teams to ensure our endpoints and applications are sending all relevant information to Splunk, and that Splunk is proactively alerting on the right things. The ideal candidate will have at least five years of enterprise engineering experience building infrastructure logging and alerting within Splunk Enterprise.
 
You will help drive us forward with our virtualization, cloud, and SAAS initiatives and keep Relativity up-to-date as industry-changing technologies arise. Your role will ultimately support our expanding user base and technical requirements as our company continues to grow.

Role Responsibilities

  • Provide leadership for all design, deployment, and maintenance of our production Splunk forwarders, rulesets, and alerts
  • Keep our Splunk Cloud evergreen by ensuring all new servers, network equipment, SAAS applications and endpoints log the right level of information to Splunk.
  • Create, optimize, and continuously evaluate security monitoring content (correlated searches/alerts) on Splunk Cloud and ES.
  • Work with the IT, Security, and RelativityOne Service Delivery teams to ensure the proper logs are being sent to Splunk and value is being delivered.
  • Ensure we have the proper proactive alerts configured to inform the right people to address incidents before they become problems.
  • Assist in strategic direction and planning for growth to support our increasing business needs.
  • Educate users around Splunk and the capabilities it provides.
  • Champion the use of Splunk for end users, provide direction on the changes Splunk is implementing, and keep management informed of ways we can increase the value we get out of it.
  • Keep on top of industry trends and logging technology

Minimum Qualifications

  • Splunk and Splunk ES – deep knowledge of Splunk design and maintenance
  • Automation – scripting experience to help with automating repeatable tasks
  • Cloud Services – Experience with MS Azure, Amazon Web Services, or other cloud offerings
  • Applications – Splunk monitoring of Atlassian, data warehouse, or home grown SAAS applications a plus
  • Storage – General knowledge of iSCSI vs Fiber Channel, NAS, and SAN
  • Networking – knowledge including routing, switching, and firewall concepts
  • Ability to maintain a calm demeanor when things are going wrong to troubleshoot issues effectively
  • Three years of Splunk solution design and support. The candidate must have experience in designing, implementing, and maintaining a fully operating SIEM solution.
  • Splunk Admin Certification or above a strong plus
  • Bachelor's degree or equivalent work experience
  • #LI-MA1

Preferred Qualifications

  • Virtualization – General knowledge of VMware or Hyper-V Virtualization
  • Experience – 7 years in Infrastructure, Engineering, or Application Development

About Relativity

Relativity has over 160,000 users in 40+ countries from organizations including the U.S. Department of Justice, more than 70 Fortune 100 companies, and all of the Am Law 200. Relativity's cloud solution, RelativityOne, offers all the functionality of Relativity in a secure and comprehensive SaaS product. Our company has also been named one of Chicago's Top Workplaces by the Chicago Tribune for seven consecutive years. If you’re ready to grow with us, we’d love to hear from you. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.

How We #ActOnIt

Connect With Us

Not ready to apply? Connect with us for general consideration.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, or national origin, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.