Splunk Platform Engineer

XPT Software; Sydney; On-site; AUD 140,000 - 190,000; Full time

Job summary

XPT Software in Sydney is seeking an experienced Splunk Platform Engineer to manage a distributed Splunk environment hosted on AWS. You will administer search head and indexer clusters, deployers, forwarders, and related components, ensuring health and scalability.

The role requires Linux (RHEL/Amazon Linux), AWS expertise, Python or Bash scripting, and strong documentation and stakeholder skills. Certification in Splunk Enterprise Security or AWS is a plus; ITIL/ServiceNow/Jira familiarity is

Qualifications

• Experience managing a distributed Splunk environment in AWS.
• Strong Linux administration and scripting skills.
• Proven ability to plan upgrades and migrations with minimal downtime.
• Experience with security compliance, audits, and ITIL-based processes.

Responsibilities

• Administer Splunk Search Head and Indexer clusters, Deployers, Forwarders, and supporting components.
• Monitor platform health, data ingestion, storage, searches, and alerts.
• Onboard log sources, configure inputs, parsing, indexes, and retention.
• Plan and execute Splunk upgrades, migrations, patching, and testing.
• Support AWS-based Splunk infrastructure and S3/Glacier archival.
• Manage incidents, changes, and root-cause analysis with documentation.

Skills

Splunk architecture

Splunk admin

Clustering & upgrades

Linux (RHEL/Amazon Linux)

AWS (EC2, S3, IAM, VPC)

Python/Bash scripting

Security/compliance

ITIL/ServiceNow/Jira

Communication & documentation

Education

Bachelor’s degree in Computer Science or related field

Tools

Splunk Enterprise Security

Splunk Cloud

Splunk SOAR

Jira

ServiceNow

Terraform

Ansible

Job description

• XPT SoftwareAustralia PTY Ltd, incorporated in 2016, is a Software Services company
• XPT works with topclients across Australia in Banking, Insurance, Telecom,Retail, Energy, Mining and Manufacturingdomains.
• We have 120+technocrats in Australia working at our clientlocations.
• XPT SoftwareAustralia is part of group companies which has globalpresence across India & Europe.
• We have served100+ clients globally, fulfilling their onsite-offshoreneeds.

We are seeking an experienced Splunk Platform Engineer to manage and support a distributed Splunk environment hosted on AWS.

Key Responsibilities

• AdministerSplunk Search Head and Indexer clusters, Deployers, Deployment Servers, Forwarders,and supporting components.
• Monitorand troubleshoot platform health, performance, data ingestion, storage,searches, and alerts.
• Onboardlog sources and configure inputs, parsing, timestamps, indexes, retention,and access controls.
• Planand execute Splunk upgrades, migrations, patching, vulnerabilityremediation, and compatibility testing.
• SupportAWS-based Splunk infrastructure and S3/Glacier log archival.
• Manageincidents, problems, changes, root-cause analysis, and operationaldocumentation.
• Workwith security, cloud, infrastructure, application, and vendor teams.

Required Skills

• Strongknowledge of Splunk architecture and distributed environments.
• Hands-onexperience with Splunk administration, clustering, upgrades, migrations,and troubleshooting.
• Experiencewith Linux, particularly RHEL and Amazon Linux.
• Workingknowledge of AWS services, including EC2, S3, IAM, VPC, Subnets, SecurityGroups, and CloudWatch.
• Proficiencyin Python, Bash, or Shell scripting.
• Strongcommunication, documentation, and stakeholder-management skills.
• SplunkEnterprise Security, Splunk Cloud, or Splunk SOAR.
• ServiceNowor Jira and ITIL-based service-management processes.
• Securitycompliance, audit evidence, and vulnerability management.

Certifications – Optional

• SplunkEnterprise Certified Admin or Architect.
• AWSCertified Solutions Architect – Associate or Professional.
• RelevantRed Hat, Terraform, Ansible, ITIL, or security certification.