Senior Splunk Engineer

U3 SOLUTIONS PTE. LTD.; Singapore; On-site; SGD 150,000 - 210,000; Full time

Job summary

U3 SOLUTIONS PTE. LTD. seeks an experienced Splunk Architect/Administrator to lead security log onboarding and operational support.

You will own log management, observability, and data ingestion strategies across a hybrid environment, while architecting and maintaining a distributed Splunk setup for seamless on-prem and AWS data onboarding. The role demands 8+ years in IT infrastructure with 5+ years in Splunk, strong scripting (Python/Bash), and expertise in cloud log integration and scalable

Qualifications

• The candidate must have 8+ years of IT Infrastructure/Enterprise Logging or Systems Engineering experience, with 5+ years focused on Splunk architecture and administration.
• Deep hands-on AWS cloud logs integration and Splunk components in public cloud environments are required.
• Strong scripting ability in Python or Bash and familiarity with configuration management tools (Ansible, Puppet, Terraform).
• Proficiency in network protocols, firewalls, and scalable Syslog architectures (e.g., SC4S) is essential.
• Excellent root-cause analysis skills, autonomy, and quick learning with SaaS tools and evolving infra tech.
• Strong written and verbal communication with the ability to coordinate across diverse stakeholders.

Responsibilities

• Handle and support application security log onboarding exercise to Splunk and Operations.
• Lead log management, observability, and data ingestion strategies across a hybrid environment.
• Architect, scale, and maintain distributed Splunk infrastructure with data onboarding from on-prem and AWS.

Skills

Splunk Architecture

Python/Bash scripting

AWS Cloud integration

Automation tools

Syslog/Network mastery

Root-cause analysis

Autonomy

Cross-team communication

Tools

Splunk

Ansible

Terraform

Puppet

Job description

Summary:

• The successful candidate will handle and support application security log onboarding exercise to Splunk and Operations.


• The candidate is expected to have proven enterprise IT experience to lead log management, observability, and data ingestion strategies across a hybrid environment.


• He/she will architect, scale, and maintain distributed Splunk infrastructure, ensuring seamless data onboarding from both on-premises data centers and AWS Cloud resources.

Skillset Requirements:

• Minimum 8 years of experience in IT Infrastructure, Enterprise Logging, or Systems Engineering, with a minimum of 5 years dedicated experience exclusively to Splunk Architecture and Administration.


• Cloud Expertise: Deep hands-on experience integrating AWS Cloud native logs and managing Splunk components within public cloud environments.


• Automation and scripting: Strong proficiency in Python or Bash scripting, alongside configuration management tools like Ansible, Puppet, or Terraform.


• Network and Syslog Mastery: Advanced knowledge of network protocols, firewalls, and setting up scalable, resilient Syslog architectures (e.g., Splunk Connect for Syslog - SC4S).


• Exceptional root-cause analysis skills, a high degree of autonomy, and a proven track record as a quick learner who adapts rapidly to new SaaS tools and evolving infrastructure technologies.


• A good team player with excellent written and verbal communication skills, able to coordinate across diverse stakeholders.

Good to have:

• CI/CD Expertise: Hands-on experience with GitHub Actions / GitHub CI/CD pipelines to automate Splunk configuration deployment, app validation (Splunk App Inspect), or Ansible workflow triggers.


• Splunk Enterprise Certified Architect or Splunk Core Certified Advanced Power User.


• Certified Ansible Automation Professional or Specialist.