Splunk Platform Engineer

We are seeking an experienced Splunk Platform Engineer to manage and support a distributed Splunk environment hosted on AWS.

Key Responsibilities

Administer Splunk Search Head and Indexer clusters, Deployers, Deployment Servers, Forwarders, and supporting components.
Monitor and troubleshoot platform health, performance, data ingestion, storage, searches, and alerts.
Onboard log sources and configure inputs, parsing, timestamps, indexes, retention, and access controls.
Plan and execute Splunk upgrades, migrations, patching, vulnerability remediation, and compatibility testing.
Support AWS-based Splunk infrastructure and S3/Glacier log archival.
Manage incidents, problems, changes, root-cause analysis, and operational documentation.
Work with security, cloud, infrastructure, application, and vendor teams.

Required Skills

Strong knowledge of Splunk architecture and distributed environments.
Hands-on experience with Splunk administration, clustering, upgrades, migrations, and troubleshooting.
Experience with Linux, particularly RHEL and Amazon Linux.
Working knowledge of AWS services, including EC2, S3, IAM, VPC, Subnets, Security Groups, and CloudWatch.
Proficiency in Python, Bash, or Shell scripting.
Strong communication, documentation, and stakeholder-management skills.

Desirable Experience

Splunk Enterprise Security, Splunk Cloud, or Splunk SOAR.
ServiceNow or Jira and ITIL-based service-management processes.
Security compliance, audit evidence, and vulnerability management.

Certifications – Optional

Splunk Enterprise Certified Admin or Architect.
AWS Certified Solutions Architect – Associate or Professional.
Relevant Red Hat, Terraform, Ansible, ITIL, or security certification.

Skill richieste

Splunk architecture (distributed environments)Splunk administration and clustering (Search Head and Indexer clusters)Splunk deployment components (Deployers, Deployment Server, Forwarders)Splunk upgrades, migrations, patching, and compatibility testingSplunk troubleshooting and platform monitoring (data ingestion, searches, alerts)Linux administration (RHEL, Amazon Linux)AWS EC2AWS S3 and Glacier (log archival)AWS networking and security (VPC, Subnets, Security Groups, IAM)AWS CloudWatch monitoringPython programmingBash/Shell scriptingIncident, Problem, and Change Management with Root Cause AnalysisCommunication, documentation, and stakeholder managementExperience with Splunk Enterprise Security, Splunk Cloud or Splunk SOAR (desirable)

Offerte simili