Splunk Platform Engineer – AWS Cloud & Ops

XPT Software; City of Melbourne; On-site; AUD 120,000 - 170,000; Full time

Job summary

Unknown company seeks an experienced Splunk Platform Engineer to manage a distributed Splunk environment hosted on AWS. You will administer clusters, onboard log sources, and plan upgrades while coordinating with security, cloud, and vendor teams.

The role requires strong Splunk, Linux, and AWS skills, plus ITIL-aligned service-management experience and excellent stakeholder communication.

Qualifications

• Strong knowledge of Splunk architecture in distributed environments.
• Hands-on Splunk administration, clustering, upgrades, migrations, and troubleshooting.
• Experience with Linux (RHEL/Amazon Linux).
• Working knowledge of AWS services (EC2, S3, IAM, VPC, Subnets, SGs, CloudWatch).
• Proficiency in Python or Bash scripting.
• Strong communication, documentation, and stakeholder-management skills.
• Experience with Splunk Enterprise Security, Splunk Cloud, or Splunk SOAR.
• Experience with ServiceNow or Jira and ITIL-based service-management processes.
• Security compliance, audit evidence, and vulnerability management.

Responsibilities

• Administer Splunk Search Head and Indexer clusters, Deployers, Deployment Servers, and Forwarders.
• Monitor platform health, performance, data ingestion, storage, searches, and alerts.
• Onboard log sources and configure inputs, parsing, timestamps, indexes, retention, and access controls.
• Plan and execute Splunk upgrades, migrations, patching, vulnerability remediation, and compatibility testing.
• Support AWS-based Splunk infrastructure and S3/Glacier log archival.
• Manage incidents, problems, changes, root-cause analysis, and operational documentation.
• Work with security, cloud, infrastructure, application, and vendor teams.

Skills

Splunk architecture

Splunk administration

RHEL/Amazon Linux

AWS fundamentals

Python scripting

ITIL/ITSM tools

Splunk ES/Cloud/SOAR

Stakeholder management

Splunk clustering

Security compliance

Tools

Splunk

AWS

Jira

ServiceNow

ITIL

Job description

Unknown company seeks an experienced Splunk Platform Engineer to manage a distributed Splunk environment hosted on AWS. You will administer clusters, onboard log sources, and plan upgrades while coordinating with security, cloud, and vendor teams.

The role requires strong Splunk, Linux, and AWS skills, plus ITIL-aligned service-management experience and excellent stakeholder communication.