Splunk Platform Engineer

Job Description

\n

\n
• XPT SoftwareAustralia PTY Ltd, incorporated in 2016, is a Software Services company
\n
• XPT works with topclients across Australia in Banking, Insurance, Telecom,Retail, Energy, Mining and Manufacturingdomains.
\n
• We have 120+technocrats in Australia working at our clientlocations.
\n
• XPT SoftwareAustralia is part of group companies which has globalpresence across India & Europe.
\n
• We have served100+ clients globally, fulfilling their onsite-offshoreneeds.
\n

\n

We are seeking an experienced Splunk Platform Engineer to manage and support a distributed Splunk environment hosted on AWS.

Key Responsibilities \n

\n
• AdministerSplunk Search Head and Indexer clusters, Deployers, Deployment Servers, Forwarders,and supporting components.
\n
• Monitorand troubleshoot platform health, performance, data ingestion, storage,searches, and alerts.
\n
• Onboardlog sources and configure inputs, parsing, timestamps, indexes, retention,and access controls.
\n
• Planand execute Splunk upgrades, migrations, patching, vulnerabilityremediation, and compatibility testing.
\n
• SupportAWS-based Splunk infrastructure and S3/Glacier log archival.
\n
• Manageincidents, problems, changes, root-cause analysis, and operationaldocumentation.
\n
• Workwith security, cloud, infrastructure, application, and vendor teams.
\n

Required Skills \n

\n
• Strongknowledge of Splunk architecture and distributed environments.
\n
• Hands-onexperience with Splunk administration, clustering, upgrades, migrations,and troubleshooting.
\n
• Experiencewith Linux, particularly RHEL and Amazon Linux.
\n
• Workingknowledge of AWS services, including EC2, S3, IAM, VPC, Subnets, SecurityGroups, and CloudWatch.
\n
• Proficiencyin Python, Bash, or Shell scripting.
\n
• Strongcommunication, documentation, and stakeholder-management skills.
\n
• SplunkEnterprise Security, Splunk Cloud, or Splunk SOAR.
\n
• ServiceNowor Jira and ITIL-based service-management processes.
\n
• Securitycompliance, audit evidence, and vulnerability management.
\n

Certifications – Optional \n

\n
• SplunkEnterprise Certified Admin or Architect.
\n
• AWSCertified Solutions Architect – Associate or Professional.
\n
• RelevantRed Hat, Terraform, Ansible, ITIL, or security certification.
\n

\n

#J-18808-Ljbffr