Senior Splunk Platform Engineer on AWS

XPT Software; Sydney; On-site; AUD 140,000 - 190,000; Full time

Job summary

XPT Software in Sydney is seeking an experienced Splunk Platform Engineer to manage a distributed Splunk environment hosted on AWS. You will administer search head and indexer clusters, deployers, forwarders, and related components, ensuring health and scalability.

The role requires Linux (RHEL/Amazon Linux), AWS expertise, Python or Bash scripting, and strong documentation and stakeholder skills. Certification in Splunk Enterprise Security or AWS is a plus; ITIL/ServiceNow/Jira familiarity is

Qualifications

• Experience managing a distributed Splunk environment in AWS.
• Strong Linux administration and scripting skills.
• Proven ability to plan upgrades and migrations with minimal downtime.
• Experience with security compliance, audits, and ITIL-based processes.

Responsibilities

• Administer Splunk Search Head and Indexer clusters, Deployers, Forwarders, and supporting components.
• Monitor platform health, data ingestion, storage, searches, and alerts.
• Onboard log sources, configure inputs, parsing, indexes, and retention.
• Plan and execute Splunk upgrades, migrations, patching, and testing.
• Support AWS-based Splunk infrastructure and S3/Glacier archival.
• Manage incidents, changes, and root-cause analysis with documentation.

Skills

Splunk architecture

Splunk admin

Clustering & upgrades

Linux (RHEL/Amazon Linux)

AWS (EC2, S3, IAM, VPC)

Python/Bash scripting

Security/compliance

ITIL/ServiceNow/Jira

Communication & documentation

Education

Bachelor’s degree in Computer Science or related field

Tools

Splunk Enterprise Security

Splunk Cloud

Splunk SOAR

Jira

ServiceNow

Terraform

Ansible

Job description

XPT Software in Sydney is seeking an experienced Splunk Platform Engineer to manage a distributed Splunk environment hosted on AWS. You will administer search head and indexer clusters, deployers, forwarders, and related components, ensuring health and scalability.

The role requires Linux (RHEL/Amazon Linux), AWS expertise, Python or Bash scripting, and strong documentation and stakeholder skills. Certification in Splunk Enterprise Security or AWS is a plus; ITIL/ServiceNow/Jira familiarity is