Splunk Platform Engineer

We are seeking an experienced Splunk Platform Engineer to
manage and support a distributed Splunk environment hosted on AWS.

Key Responsibilities

- Administer
Splunk Search Head and Indexer clusters, Deployers, Deployment Servers, Forwarders,
and supporting components.

- Monitor
and troubleshoot platform health, performance, data ingestion, storage,
searches, and alerts.

- Onboard
log sources and configure inputs, parsing, timestamps, indexes, retention,
and access controls.

- Plan
and execute Splunk upgrades, migrations, patching, vulnerability
remediation, and compatibility testing.

- Support
AWS-based Splunk infrastructure and S3/Glacier log archival.

- Manage
incidents, problems, changes, root-cause analysis, and operational
documentation.

- Work
with security, cloud, infrastructure, application, and vendor teams.

Required Skills

- Strong
knowledge of Splunk architecture and distributed environments.

- Hands-on




experience with Splunk administration, clustering, upgrades, migrations,
and troubleshooting.

- Experience
with Linux, particularly RHEL and Amazon Linux.

- Working
knowledge of AWS services, including EC2, S3, IAM, VPC, Subnets, Security
Groups, and CloudWatch.

- Proficiency
in Python, Bash, or Shell scripting.

- Robust
communication, documentation, and stakeholder-management skills.

Desirable Experience

- Splunk
Enterprise Security, Splunk Cloud, or Splunk SOAR.

- ServiceNow
or Jira and ITIL-based service-management processes.

- Security
compliance, audit evidence, and vulnerability management.

Certifications – Optional

- Splunk
Enterprise Certified Admin or Architect.

- AWS
Certified Solutions Architect – Associate or Professional.

- Relevant
Red Hat, Terraform, Ansible, ITIL, or security certification.

📌 Splunk Platform Engineer (Melbourne)
🏢 Recognized
📍 Melbourne