Job Description
We are seeking an experienced Splunk Platform Engineer to manage and support a distributed Splunk environment hosted on AWS.
Key Responsibilities n
n
Administer Splunk Search Head and Indexer clusters, Deployers, Deployment Servers, Forwarders, and supporting components.
n
Monitor and troubleshoot platform health, performance, data ingestion, storage, searches, and alerts.
n
Onboard log sources and configure inputs, parsing, timestamps, indexes, retention, and access controls.
n
Plan and execute Splunk upgrades, migrations, patching, vulnerability remediation, and compatibility testing.
n
Support AWS-based Splunk infrastructure and S3/Glacier log archival.
n
Manage incidents, problems, changes, root-cause analysis, and operational documentation.
n
Work with security, cloud, infrastructure, application, and vendor teams.
n
Required Skills n
n
Strong knowledge of Splunk architecture and distributed environments.
n
Hands-on experience with Splunk administration, clustering,



upgrades, migrations, and troubleshooting.
n
Experience with Linux, particularly RHEL and Amazon Linux.
n
Working knowledge of AWS services, including EC2, S3, IAM, VPC, Subnets, Security Groups, and CloudWatch.
n
Proficiency in Python, Bash, or Shell scripting.
n
Robust communication, documentation, and stakeholder-management skills.
n
Desirable Experience n
n
Splunk Enterprise Security, Splunk Cloud, or Splunk SOAR.
n
ServiceNow or Jira and ITIL-based service-management processes.
n
Security compliance, audit evidence, and vulnerability management.
n
Certifications – Optional n
n
Splunk Enterprise Certified Admin or Architect.
n
AWS Certified Solutions Architect – Associate or Professional.
n
Relevant Red Hat, Terraform, Ansible, ITIL, or security certification.
n
#J-*****-Ljbffr

📌 Splunk Platform Engineer (Melbourne)
🏢 Xpt Software Australia
📍 Melbourne