Senior Splunk Engineer

Job Summary

We are seeking an experienced Senior Splunk Engineer to design, implement, administer, and support enterprise-wide Splunk infrastructure and operations. The successful candidate will be responsible for application security log onboarding, enterprise log management, observability, and data ingestion across hybrid environments, including on-premises data centers and AWS Cloud.

The role requires strong expertise in Splunk Architecture, Administration, AWS log integration, Syslog infrastructure, and automation to ensure reliable, scalable, and secure enterprise logging operations.

Key Responsibilities

1. Design, implement, administer, and maintain enterprise Splunk infrastructure, ensuring scalability, availability, and performance.
2. Lead application security log onboarding and integrate logs from on-premises data centres and AWS Cloud environments.
3. Manage Splunk components, including Indexers, Search Heads, Forwarders, and distributed logging architecture.
4. Develop automation scripts using Python/Bash and implement configuration management using Ansible, Puppet, or Terraform.
5. Design and support scalable Syslog architectures, including Splunk Connect for Syslog (SC4S), and troubleshoot log ingestion issues.
6. Provide operational support, performance monitoring, root-cause analysis, and CI/CD automation for Splunk deployments.

Requirements

1. Bachelor's degree in computer science, Information Technology, or a related discipline.
2. Minimum 8 years of overall IT Infrastructure, Enterprise Logging, or Systems Engineering experience, including at least 5 years of dedicated Splunk Architecture and Administration experience.
3. Strong hands-on expertise in Splunk Enterprise architecture, administration, log management, and application security log onboarding.
4. Proven experience integrating AWS Cloud-native logs, including CloudTrail, CloudWatch, and VPC Flow Logs, with Splunk.
5. Strong scripting knowledge in Python/Bash, configuration management tools (Ansible, Puppet, Terraform), and advanced Syslog/networking concepts, including SC4S.
6. Excellent troubleshooting skills; GitHub Actions, CI/CD, Splunk AppInspect, and Splunk/Ansible certifications are advantageous.