Linux System Engineer - Splunk

Missions

• Support Linux-based IT infrastructure and the Splunk platform

• Resolve incidents and service requests affecting Linux systems and Splunk services

• Use Splunk and OS-level diagnostics to identify and resolve issues

• Perform routine maintenance

• Implement system and platform changes in line with established processes and standards

  • Ensure minimal service disruption

• Design, implement, and continuously improve Splunk solutions

  • Data onboarding

  • Forwarder configuration

  • Indexes

  • Sourcetypes

  • Parsing

  • Dashboards

  • Reports

  • Alerts

  • Field extractions

• Improve data quality, platform performance, and service visibility

• Contribute to problem management

  • Perform root cause analysis based on Splunk data, logs, and Linux system behaviour

  • Propose and implement long-term corrective actions

• Collaborate with cross-functional teams

  • Ensure data sources are correctly integrated into Splunk

  • Ensure supporting Linux systems remain secure, compliant, and reliable

• Participate in R&D activities

  • Evaluate new Splunk capabilities, apps, add-ons, and integration methods

  • Contribute to solution prototypes

• Drive automation through scripting and Infrastructure-as-Code

  • Standardise Splunk and Linux configuration

  • Reduce manual intervention

  • Increase platform reliability

1. Minimum 4 years of experience in IT operations managing containerized, virtualized, and/or physical Linux-based infrastructure in large-scale environments (enterprise, governmental, or supranational)

2. At least 2 years of hands-on experience administering and supporting Splunk environments in production

3. End-to-end lifecycle management of Red Hat Enterprise Linux or equivalent environments

4. Practical knowledge of data source onboarding and maintenance using ingestion methods

5. Experience monitoring Splunk platform health and investigating ingestion and search issues

6. Working understanding of indexes, sourcetypes, parsing, data retention, and role-based access concepts

7. Working understanding of metrics collection, log aggregation, dashboards, and alerting strategies

8. Working understanding of event correlation, basic anomaly investigation, and performance baselining

9. Using Splunk to support incident detection, diagnosis, and reduction of MTTD/MTTR

10. Ability to implement defined solutions independently, document changes, and escalate complex architecture or performance issues to senior engineers when required

11. System performance tuning, troubleshooting, and OS-level diagnostics

12. Familiarity with Infrastructure-as-Code principles and pipeline integration

13. Experience integrating automation with monitoring and operational workflows

14. Understanding of CI/CD pipelines for infrastructure and configuration deployment

15. Experience with the Red Hat container ecosystem

16. Understanding of container monitoring and lifecycle operations

17. Experience working within structured ITIL-aligned processes

18. Strong focus on monitoring-driven operations, diagnostics, and forensics

19. Exposure to hardware lifecycle management

20. Basic operational knowledge of network/security platforms

21. Ability to correlate infrastructure and network events for incident analysis

22. Ability to develop automation for monitoring, remediation, and reporting

23. Experience with vendor coordination, support processes, and licensing management

24. Ability to work independently

25. Ability to document changes

26. Ability to escalate complex issues when required

27. Dutch or French: Full professional / native proficiency

28. English: Professional working proficiency