Splunk Engineer

5+ years of hands-on experience administering large-scale Splunk Enterprise or Splunk Cloud environments Strong expertise in Indexer clustering, search head clustering, Universal and heavy forwarder architectures, SmartStore/S3-compatible object storage, and SPL Deep experience with security log ingestion and SIEM use cases Proven ability to lead production incidents, perform RCA, and drive preventive solutions Strong Linux administration skills and experience managing Splunk configuration and apps Experience working in 24x7 production environments with high availability expectations Excellent written and verbal communication skills, with the ability to engage senior technical and business stakeholders Desired skills: A production owner’s mindset and deep technical credibility in Splunk and data pipelines Ability to operate calmly and decisively during high-severity security and platform incidents Splunk certifications such as Enterprise Admin or Enterprise Architect Experience with Splunk Enterprise Security (ES) and SOAR (Phantom or equivalent) Exposure to cloud logging and security architectures (AWS, Azure, GCP) Knowledge of Red Hat Enterprise Linux and Windows Server administration Experience with monitoring, APM, and event management tools Strong understanding of security, network, system, and database operations Ability to balance multiple priorities in a fast-paced, enterprise production environment