Splunk Platform Engineer
Core
Install, configure, and maintain Splunk Enterprise and Splunk Cloud infrastructure, including forwarders, indexer clusters, and search head clusters, while managing data ingestion, parsing, and platform health.
Role type
Senior Splunk Platform Engineer
Builds
Splunk Enterprise and Splunk Cloud environments, data pipelines, monitoring dashboards, and automated deployment configurations.
Domain
IT Operations / Observability / Log Management
Required skills
Splunk administration, Linux/Windows administration, Ansible, Terraform, Git, CI/CD, Python/Bash/PowerShell scripting, Change Management (ITIL), Vulnerability remediation, Capacity planning, Role-based access control (RBAC), SSO/LDAP integration, Disaster recovery planning.
Preferred skills
Splunk Certified Admin/Power User, ITSI/Splunk Observability Cloud experience, OpenTelemetry configuration, Cloud platforms (AWS/Azure/GCP), Kubernetes/Docker, ServiceNow, Splunk ITSI/Enterprise Security/SOAR, Kafka/Cribl.
Technologies
Splunk Enterprise, Splunk Cloud, OpenTelemetry, Ansible, Terraform, Git, Python, Bash, PowerShell, Linux, Windows, AWS, Azure, GCP, Kubernetes, Docker, ServiceNow, Kafka, Cribl.
Responsibilities
Install and maintain Splunk forwarders and onboard new data sources; Administer Splunk Cloud including app upgrades and RBAC; Execute ACSC-approved changes with rollback plans; Remediate Splunk vulnerabilities; Monitor system health and troubleshoot indexing/search issues; Write and maintain runbooks and automate repeat work; Manage capacity, performance tuning, and data retention; Implement security controls (SSO, encryption, audit); Plan upgrades, patching, and disaster recovery; Mentor junior engineers; Participate in on-call rotation.
Seniority
Senior, hands-on IC
