Senior Splunk Engineer

U3 PROJECTS PTE. LTD.; Singapore; On-site; SGD 180,000 - 240,000; Full time

Job summary

U3 PROJECTS PTE. LTD. seeks a Senior Splunk Architect to own Splunk architecture and administration, oversee log onboarding for security applications, and drive observability across a hybrid IT environment.

You will architect, scale, and maintain distributed Splunk infrastructure, ensuring seamless data onboarding from on-premises data centers and AWS resources, while leading automation and cloud integration efforts.

Qualifications

• 8+ years in IT infrastructure or enterprise logging; 5+ years in Splunk architecture/administration.
• Deep hands-on AWS cloud logs integration and Splunk in cloud environments.
• Proficient in Python or Bash; with Ansible, Puppet or Terraform for automation.
• Advanced knowledge of network protocols, firewalls, and scalable Syslog (SC4S).
• Strong root-cause analysis, autonomy, and quick learner for SaaS tools.
• Excellent written and verbal communication across stakeholders.

Responsibilities

• Handle and support application security log onboarding to Splunk and Operations.
• Lead log management, observability, and data ingestion strategies across a hybrid environment.
• Architect, scale, and maintain distributed Splunk infrastructure for seamless data onboarding from on-prem and AWS.

Skills

Splunk architecture

Splunk administration

Python scripting

Bash scripting

AWS integration

Ansible

Puppet

Terraform

Network protocols

Root-cause analysis

Communication skills

Tools

Splunk

SC4S

GitHub Actions

Automation tooling

Job description

Summary:

• The successful candidate will handle and support application security log onboarding exercise to Splunk and Operations.
• The candidate is expected to have proven enterprise IT experience to lead log management, observability, and data ingestion strategies across a hybrid environment.
• He/she will architect, scale, and maintain distributed Splunk infrastructure, ensuring seamless data onboarding from both on-premises data centers and AWS Cloud resources.

Skillset Requirements:

• Minimum 8 years of experience in IT Infrastructure, Enterprise Logging, or Systems Engineering, with a minimum of 5 years dedicated experience exclusively to Splunk Architecture and Administration.
• Cloud Expertise: Deep hands-on experience integrating AWS Cloud native logs and managing Splunk components within public cloud environments.
• Automation and scripting: Strong proficiency in Python or Bash scripting, alongside configuration management tools like Ansible, Puppet, or Terraform.
• Network and Syslog Mastery: Advanced knowledge of network protocols, firewalls, and setting up scalable, resilient Syslog architectures (e.g., Splunk Connect for Syslog - SC4S).
• Exceptional root-cause analysis skills, a high degree of autonomy, and a proven track record as a quick learner who adapts rapidly to new SaaS tools and evolving infrastructure technologies.
• A good team player with excellent written and verbal communication skills, able to coordinate across diverse stakeholders.

Good to have:

• CI/CD Expertise: Hands-on experience with GitHub Actions / GitHub CI/CD pipelines to automate Splunk configuration deployment, app validation (Splunk AppInspect), or Ansible workflow triggers.
• Splunk Enterprise Certified Architect or Splunk Core Certified Advanced Power User.
• Certified Ansible Automation Professional or Specialist.