Splunk Platform EngineerWe are seeking an experienced Splunk Platform Engineer tomanage and support a distributed Splunk environment hosted on AWS.Key ResponsibilitiesAdminister Splunk Search Head and Indexer clusters, Deployers, Deployment Servers, Forwarders, and supporting components.Monitor and troubleshoot platform health, performance, data ingestion, storage, searches, and alerts.Onboard log sources and configure inputs, parsing, timestamps, indexes, retention, and access controls.Plan and execute Splunk upgrades, migrations, patching, vulnerability remediation, and compatibility testing.Support AWS-based Splunk infrastructure and S3/Glacier log archival.Manage incidents, problems, changes, root-cause analysis, and operational documentation.Work with security, cloud, infrastructure, application, and vendor teams.Required SkillsStrong knowledge of Splunk architecture and distributed environments.Hands-on experience with Splunk administration,



clustering, upgrades, migrations, and troubleshooting.Experience with Linux, particularly RHEL and Amazon Linux.Working knowledge of AWS services, including EC2, S3, IAM, VPC, Subnets, Security Groups, and CloudWatch.Proficiency in Python, Bash, or Shell scripting.Robust communication, documentation, and stakeholder-management skills.Desirable ExperienceSplunk Enterprise Security, Splunk Cloud, or Splunk SOAR.ServiceNow or Jira and ITIL-based service-management processes.Security compliance, audit evidence, and vulnerability management.Certifications – OptionalSplunk Enterprise Certified Admin or Architect.AWS Certified Solutions Architect – Associate or Professional.Relevant Red Hat, Terraform, Ansible, ITIL, or security certification.

📌 Splunk Platform Engineer (Melbourne)
🏢 XPT Software Australia Pty
📍 Melbourne