Splunk Platform Engineer

Splunk Platform Engineer We are seeking an experienced Splunk Platform Engineer to manage and support a distributed Splunk environment hosted on AWS.

Key Responsibilities

Administer Splunk Search Head and Indexer clusters, Deployers, Deployment Servers, Forwarders, and supporting components. Monitor and troubleshoot platform health, performance, data ingestion, storage, searches, and alerts. Onboard log sources and configure inputs, parsing, timestamps, indexes, retention, and access controls.

Plan and execute Splunk upgrades, migrations, patching, vulnerability remediation, and compatibility testing. Support AWS-based Splunk infrastructure and S3/Glacier log archival. Manage incidents, problems, changes, root-cause analysis, and operational documentation. Work with security, cloud, infrastructure, application, and vendor teams.

Required Skills

Strong knowledge of Splunk architecture and distributed environments. Hands-on experience with Splunk administration, clustering, upgrades, migrations, and troubleshooting. Experience with Linux, particularly RHEL and Amazon Linux. Working knowledge of AWS services, including EC2, S3, IAM, VPC, Subnets, Security Groups, and CloudWatch.

Proficiency in Python, Bash, or Shell scripting. Strong communication, documentation, and stakeholder-management skills. Desirable Experience Splunk Enterprise Security, Splunk Cloud, or Splunk SOAR. ServiceNow or Jira and ITIL-based service-management processes. Security compliance, audit evidence, and vulnerability management.

Certifications – Optional Splunk Enterprise Certified Admin or Architect. AWS Certified Solutions Architect – Associate or Professional. Relevant Red Hat, Terraform, Ansible, ITIL, or security certification.