Splunk & Linux System Engineer

ITS Group S.A.; Brussel; Presencial; EUR 65 000 - 85 000; Tempo integral

Resumo da oferta

ITS Group S.A. in Brussels is seeking a Splunk & Linux System Engineer to support a Linux-based enterprise infrastructure and the Splunk platform in a large-scale environment.

The role combines Linux system engineering, Splunk administration, monitoring, troubleshooting, automation, and platform engineering. You will ensure reliability, security, and performance while contributing to incident resolution, automation initiatives, and platform evolution.

Qualificações

• Minimum 2 years of hands-on Splunk in production environments.
• Minimum 4 years of experience managing Linux-based infrastructure.
• Experience with data onboarding and ingestion management.

Responsabilidades

• Support and maintain Linux-based infrastructure.
• Manage physical, virtualized, and containerized environments.
• Ensure system reliability, security, compliance, and performance.
• Administer and support production Splunk environments.
• Design, implement, and improve Splunk solutions.
• Integrate and maintain data sources.
• Develop automation solutions through scripting and Infrastructure-as-Code.
• Standardize platform configurations and improve operational efficiency.

Conhecimentos

Splunk

Linux

Automation

Python

Ansible

SPL

RBAC

Monitoring

Ferramentas

Red Hat Satellite 6.x

VMware

Podman

OCI Containers

Descrição da oferta de emprego

We are looking for a Splunk & Linux System Engineer responsible for supporting and enhancing a Linux-based enterprise infrastructure and Splunk platform in a large-scale operational environment.

The role combines Linux system engineering, Splunk administration, monitoring, troubleshooting, automation, and platform engineering. The consultant will ensure the reliability, performance, security, and continuous improvement of Linux systems and Splunk services while contributing to incident resolution, root cause analysis, automation initiatives, and platform evolution.

The consultant will work in an operational environment focused on service continuity, observability, automation, and infrastructure standardization.

Your missions:

• Support and maintain Linux-based infrastructure.
• Manage physical, virtualized, and containerized environments.
• Ensure system reliability, security, compliance, and performance.
• Perform lifecycle management of Red Hat Enterprise Linux environments.
• Administer and support production Splunk environments.
• Design, implement, and improve Splunk solutions.
• Integrate and maintain data sources.
• Optimize data quality, platform performance, and service visibility.

Incident & Problem Management

• Resolve incidents and service requests affecting Linux and Splunk services.
• Diagnose issues using operating system and Splunk data.
• Perform root cause analysis.
• Propose and implement long-term corrective actions.
• Develop automation solutions through scripting and Infrastructure-as-Code.
• Standardize platform and infrastructure configurations.
• Improve operational efficiency and platform reliability.
• Participate in R&D activities.
• Evaluate new Splunk features, applications, add-ons, and integrations.
• Contribute to solution prototyping and future platform evolution.

Your activities:

Splunk Operations

• Configure and maintain:
• Indexes
• Role-based access controls
• Manage:
• Universal Forwarders
• Splunk apps and add-ons
• Create and maintain:
• Reports
• Alerts
• Searches
• Field extractions
• Monitor Splunk platform health.
• Troubleshoot ingestion, indexing, and search issues.
• Support operational monitoring and observability initiatives.
• Perform OS-level diagnostics and troubleshooting.
• Conduct system performance tuning.
• Support patching, provisioning, and lifecycle operations.
• Maintain containerized workloads and supporting infrastructure.
• Investigate infrastructure and platform incidents.
• Analyze logs, metrics, and events.
• Correlate infrastructure, platform, and network events.
• Support detection, diagnosis, and reduction of MTTD/MTTR.
• Contribute to monitoring-driven operations and forensic investigations.

Automation & DevOps

• Ansible
• Bash
• Python
• Implement Infrastructure-as-Code practices.
• Manage Git-based workflows.
• Integrate automation into operational processes and monitoring systems.

Collaboration & Operational Governance

• Work with cross-functional teams.
• Coordinate with vendors and support partners.
• Document solutions, procedures, and changes.
• Operate within ITIL-aligned processes:
• Change Management
• Service Request Management

You have the following skills:

Must-Have

SkillsSplunk

• Minimum 2 years of hands-on experience administering and supporting Splunk in production environments.
• Data onboarding and ingestion management.
• Universal Forwarders and Heavy Forwarders.
• Apps and add-ons management.
• SPL (Search Processing Language).
• Dashboards, reports, alerts, and field extractions.
• Splunk platform monitoring and troubleshooting.
• Indexes, sourcetypes, parsing, retention policies, and RBAC concepts.
• Minimum 4 years of experience managing Linux-based infrastructure.
• Linux troubleshooting and OS diagnostics.
• System performance optimization.

Automation

• Strong Ansible Automation Platform experience.
• Bash and/or Python scripting.
• Automation workflow development.

Operations & Service Management

• Incident, problem, and change management.
• Root cause analysis.
• Monitoring-driven operations.
• ITIL-based operational environments.

Languages

• French or Dutch: Full professional proficiency.
• English: Professional working proficiency.

Nice-to-Have

SkillsInfrastructure & Platforms

• Red Hat Satellite 6.x.
• VMware environments.
• Hardware lifecycle management.
• Firmware lifecycle management.

Containers & Cloud-Native Technologies

• Podman.
• OCI Containers.
• Container monitoring.

DevOps & CI/CD

Security & Monitoring

• Event correlation.
• Anomaly investigation.
• Performance baselining.
• Monitoring and alerting strategies.
• Log aggregation and metrics collection.
• Integration of security signals into monitoring pipelines.

Security Technologies

• Trend Micro Deep Security.
• ClamAV.
• Similar endpoint protection solutions.

Network & Security Infrastructure

• Check Point.
• F5.
• InfoBlox.
• Network event correlation and incident analysis.