Splunk Platform Engineer

Key Responsibilities

• Administer Splunk Search Head and Indexer clusters, Deployers, Deployment Servers, Forwarders, and supporting components.
• Monitor and troubleshoot platform health, performance, data ingestion, storage, searches, and alerts.
• Onboard log sources and configure inputs, parsing, timestamps, indexes, retention, and access controls.
• Plan and execute Splunk upgrades, migrations, patching, vulnerability remediation, and compatibility testing.
• Support AWS-based Splunk infrastructure and S3/Glacier log archival.
• Manage incidents, problems, changes, root-cause analysis, and operational documentation.
• Work with security, cloud, infrastructure, application, and vendor teams.

Required Skills

• Strong knowledge of Splunk architecture and distributed environments.
• Hands-on experience with Splunk administration, clustering, upgrades, migrations, and troubleshooting.
• Experience with Linux, particularly RHEL and Amazon Linux.
• Working knowledge of AWS services, including EC2, S3, IAM, VPC, Subnets, Security Groups, and CloudWatch.
• Proficiency in Python, Bash, or Shell scripting.
• Strong communication, documentation, and stakeholder-management skills.

Desirable Experience

• Splunk Enterprise Security, Splunk Cloud, or Splunk SOAR.
• ServiceNow or Jira and ITIL-based service-management processes.
• Security compliance, audit evidence, and vulnerability management.

Certifications – Optional

• Splunk Enterprise Certified Admin or Architect.
• AWS Certified Solutions Architect – Associate or Professional.
• Relevant Red Hat, Terraform, Ansible, ITIL, or security certification.