Senior Splunk Engineer

Summary:

• The successful candidate will handle and support application security log onboarding exercise to Splunk and Operations.
• The candidate is expected to have proven enterprise IT experience to lead log management, observability, and data ingestion strategies across a hybrid environment.
• He/she will architect, scale, and maintain distributed Splunk infrastructure, ensuring seamless data onboarding from both on-premises data centers and AWS Cloud resources.

Skillset Requirements:

• Minimum 8 years of experience in IT Infrastructure, Enterprise Logging, or Systems Engineering, with a minimum of 5 years dedicated experience exclusively to Splunk Architecture and Administration.
• Cloud Expertise: Deep hands-on experience integrating AWS Cloud native logs and managing Splunk components within public cloud environments.
• Automation and scripting: Strong proficiency in Python or Bash scripting, alongside configuration management tools like Ansible, Puppet, or Terraform.
• Network and Syslog Mastery: Advanced knowledge of network protocols, firewalls, and setting up scalable, resilient Syslog architectures (e.g., Splunk Connect for Syslog - SC4S).
• Exceptional root-cause analysis skills, a high degree of autonomy, and a proven track record as a quick learner who adapts rapidly to new SaaS tools and evolving infrastructure technologies.
• A good team player with excellent written and verbal communication skills, able to coordinate across diverse stakeholders.

Good to have:

• CI/CD Expertise: Hands-on experience with GitHub Actions / GitHub CI/CD pipelines to automate Splunk configuration deployment, app validation (Splunk AppInspect), or Ansible workflow triggers.
• Splunk Enterprise Certified Architect or Splunk Core Certified Advanced Power User.

• Certified Ansible Automation Professional or Specialist.