Job Description
Splunk Platform Engineer
n
We are seeking an experienced Splunk Platform Engineer to
n manage and support a distributed Splunk workplace hosted on AWS.
n
Key Responsibilities
n
n
Administer
n Splunk Search Head and Indexer clusters, Deployers, Deployment Servers, Forwarders,
n and supporting components.
n
Monitor
n and troubleshoot platform health, performance, data ingestion, storage,
n searches, and alerts.
n
Onboard
n log sources and configure inputs, parsing, timestamps, indexes, retention,
n and access controls.
n
Plan
n and execute Splunk upgrades, migrations, patching, vulnerability
n remediation, and compatibility testing.
n
Support
n AWS-based Splunk infrastructure and S3/Glacier log archival.
n
Manage
n incidents, problems, changes, root-cause analysis, and operational
n documentation.
n
Work
n with security, cloud, infrastructure, application, and vendor teams.
n
n
Required Skills
n
n
Strong
n knowledge of Splunk architecture and distributed environments.
n
Hands-on




n experience with Splunk administration, clustering, upgrades, migrations,
n and troubleshooting.
n
Experience
n with Linux, particularly RHEL and Amazon Linux.
n
Working
n knowledge of AWS services, including EC2, S3, IAM, VPC, Subnets, Security
n Groups, and CloudWatch.
n
Proficiency
n in Python, Bash, or Shell scripting.
n
Strong
n communication, documentation, and stakeholder-management skills.
n
n
Desirable Experience
n
n
Splunk
n Enterprise Security, Splunk Cloud, or Splunk SOAR.
n
ServiceNow
n or Jira and ITIL-based service-management processes.
n
Security
n compliance, audit evidence, and vulnerability management.
n
n
Certifications – Optional
n
n
Splunk
n Enterprise Certified Admin or Architect.
n
AWS
n Certified Solutions Architect – Associate or Professional.
n
Relevant
n Red Hat, Terraform, Ansible, ITIL, or security certification.
n
n
n

📌 Splunk Platform Engineer (Melbourne)
🏢 XPT Software Australia Pty
📍 Melbourne