Splunk Platform Engineer

Splunk Platform Engineer

We are seeking an experienced Splunk Platform Engineer to manage and support a

distributed Splunk environment hosted on AWS.

Key Responsibilities

 Administer Splunk Search Head and Indexer clusters, Deployers, Deployment

Servers, Forwarders, and supporting components.

 Monitor and troubleshoot platform health, performance, data ingestion,

storage, searches, and alerts.

 Onboard log sources and configure inputs, parsing, timestamps, indexes,

retention, and access controls.

 Plan and execute Splunk upgrades, migrations, patching, vulnerability

remediation, and compatibility testing.

 Support AWS-based Splunk infrastructure and S3/Glacier log archival.

 Manage incidents, problems, changes, root-cause analysis, and operational

documentation.

 Work with security, cloud, infrastructure, application, and vendor teams.

Required Skills

 Strong knowledge of Splunk architecture and distributed environments.

 Hands-on experience with Splunk administration, clustering, upgrades,

migrations, and troubleshooting.

 Experience with Linux, particularly RHEL and Amazon Linux.

 Working knowledge of AWS services, including EC2, S3, IAM, VPC, Subnets,

Security Groups, and CloudWatch.

 Proficiency in Python, Bash, or Shell scripting.

 Strong communication, documentation, and stakeholder-management skills.

Desirable Experience

 Splunk Enterprise Security, Splunk Cloud, or Splunk SOAR.

 ServiceNow or Jira and ITIL-based service-management processes.

 Security compliance, audit evidence, and vulnerability management.

Certifications – Optional

 Splunk Enterprise Certified Admin or Architect.

 AWS Certified Solutions Architect – Associate or Professional.

Publi

c

 Relevant Red Hat, Terraform, Ansible, ITIL, or security certification.