Senior Splunk & Cloud Observability Engineer

System One; Columbia (SC); On-site; USD 150,000 - 185,000; Full time

Job summary

System One is seeking a Senior Splunk & Observability Engineer to support enterprise-scale observability in an AWS-based production environment. This senior, hands-on role combines Splunk administration and engineering, AWS production support, observability, and automation.

You will manage Splunk Enterprise on AWS, optimize ingestion and dashboards, develop SPL queries, and build OpenTelemetry integrations.

Qualifications

• 5+ years hands-on Splunk Enterprise administration and engineering in large production environments.
• Strong understanding of the Splunk ecosystem: ingestion, forwarders, indexers, search heads, dashboards, alerts, and recovery.
• Advanced SPL query development and performance optimization.
• Hands-on experience deploying, configuring, upgrading, troubleshooting Splunk on AWS.
• Strong AWS production experience with EC2, ALB, and CloudWatch.
• Experience building complex Splunk dashboards for production monitoring and incident triage.
• Knowledge of OpenTelemetry, agents, collectors, and Splunk integration.
• Experience with Python automation and operational tooling.
• Experience with GitLab, Terraform Enterprise, CI/CD, GitHub, and JSON.
• Strong production troubleshooting skills for ingestion failures, data volume issues, and outages.

Responsibilities

• Administer, engineer, upgrade, and support Splunk Enterprise in AWS.
• Deploy, configure, and troubleshoot Splunk components on Amazon EC2.
• Manage end-to-end Splunk data lifecycle: ingestion, indexing, search, dashboards, alerts, retention, recovery.
• Develop and optimize SPL queries and troubleshoot performance issues.
• Build and maintain enterprise dashboards for production monitoring, resiliency, incident response, and outage triage.
• Troubleshoot ingestion failures, problematic indexes, missing or delayed data, and data volume growth.
• Restore data flow and replay data after ingestion or platform interruptions.
• Integrate Splunk, CloudWatch, and OpenTelemetry for logs, metrics, dashboards, and alerts.
• Develop Python-based automation for observability and platform operations.
• Support Splunk upgrades, patches, configurations, and vulnerability remediation.
• Lead technical troubleshooting calls and coordinate incident remediation across teams.

Skills

Splunk Enterprise

AWS

OpenTelemetry

Python

SPL queries

CI/CD

GitLab

GitHub

JSON

CloudWatch

Education

Bachelor's degree in Computer Science, Information Systems, or related field

Tools

Splunk Enterprise

AWS (EC2, ALB, CloudWatch)

OpenTelemetry

Python

GitLab

Terraform Enterprise

CI/CD tooling

GitHub

JSON

Job description

System One is seeking a Senior Splunk & Observability Engineer to support enterprise-scale observability in an AWS-based production environment. This senior, hands-on role combines Splunk administration and engineering, AWS production support, observability, and automation.

You will manage Splunk Enterprise on AWS, optimize ingestion and dashboards, develop SPL queries, and build OpenTelemetry integrations.