About XPT

- XPT Software Australia PTY Ltd, incorporated in 2016, is a Software Services company

- XPT works with top clients across Australia in Banking, Insurance, Telecom, Retail, Energy, Mining and Manufacturing domains.

- We have 120+ technocrats in Australia working at our client locations.

- XPT Software Australia is part of group companies which has global presence across India & Europe.

- We have served 100+ clients globally, fulfilling their onsite-offshore needs.

Splunk Platform Engineer

We are seeking an experienced Splunk Platform Engineer to manage and support a distributed Splunk setting hosted on AWS.

Key Responsibilities

- Administer Splunk Search Head and Indexer clusters, Deployers, Deployment Servers, Forwarders, and supporting components.

- Monitor and troubleshoot platform health, performance, data ingestion, storage, searches, and alerts.

- Onboard log sources and configure inputs, parsing, timestamps, indexes, retention, and access controls.

- Plan and execute Splunk upgrades, migrations, patching, vulnerability remediation, and compatibility testing.

- Support AWS-based Splunk infrastructure and S3/Glacier log archival.

- Manage incidents, problems, changes, root-cause analysis,



and operational documentation.

- Work with security, cloud, infrastructure, application, and vendor teams.

Required Skills

- Strong knowledge of Splunk architecture and distributed environments.

- Hands-on experience with Splunk administration, clustering, upgrades, migrations, and troubleshooting.

- Experience with Linux, particularly RHEL and Amazon Linux.

- Working knowledge of AWS services, including EC2, S3, IAM, VPC, Subnets, Security Groups, and CloudWatch.

- Proficiency in Python, Bash, or Shell scripting.

- Strong communication, documentation, and stakeholder-management skills.

Desirable Experience

- Splunk Enterprise Security, Splunk Cloud, or Splunk SOAR.

- ServiceNow or Jira and ITIL-based service-management processes.

- Security compliance, audit evidence, and vulnerability management.

Certifications – Optional

- Splunk Enterprise Certified Admin or Architect.

- AWS Certified Solutions Architect – Associate or Professional.

- Relevant Red Hat, Terraform, Ansible, ITIL, or security certification.

Work Experience: 4-8 years

📌 Splunk Platform Engineer (Sydney)
🏢 XPT Software
📍 Sydney