Senior Splunk & Observability Engineer - AWS & OpenTelemetry

System One; Knoxville (TN); On-site; USD 120,000 - 180,000; Full time

Job summary

System One seeks a Senior Splunk & Observability Engineer to manage enterprise observability platforms within an AWS-based production environment. The role combines Splunk administration, AWS support, and automation to enhance monitoring and resiliency.

Responsibilities include SPL development, dashboards, data lifecycle management, and upgrades. You will collaborate across teams to ensure optimal performance and incident response.

Qualifications

• 5+ years hands-on Splunk Enterprise administration in large production environments
• Strong Splunk ecosystem knowledge: ingestion, forwarders, indexers, search heads, dashboards, alerts, recovery
• Advanced SPL query development and performance optimization
• Experience deploying, configuring, upgrading, and supporting Splunk on AWS
• Strong AWS production experience: EC2, Application Load Balancer, CloudWatch
• Experience building complex Splunk dashboards for production monitoring and incident triage
• OpenTelemetry knowledge: agents, collectors, logs, metrics, instrumentation, Splunk integration
• Python for automation and ops tooling
• Experience with GitLab, Terraform Enterprise, CI/CD, GitHub, JSON
• Strong troubleshooting: ingestion failures, data volume issues, outages, performance problems
• Platform upgrades, patches, vulnerability remediation, controlled production changes
• Ability to lead troubleshooting calls and coordinate across teams

Responsibilities

• Administer, engineer, upgrade, and support Splunk Enterprise in AWS
• Deploy, configure, troubleshoot Splunk components on EC2
• Manage end-to-end Splunk data lifecycle: ingestion, indexing, search, dashboards, alerts, retention
• Develop and optimize SPL queries and troubleshoot performance
• Build and maintain enterprise dashboards for production monitoring and resiliency
• Troubleshoot ingestion failures and data issues; manage outages and data recovery
• Restore data flow and replay data after interruptions
• Integrate Splunk with CloudWatch and OpenTelemetry for logs, metrics, alerts
• Develop Python automation for observability and platform ops
• Maintain OpenTelemetry agent/collector packages across platforms
• Support upgrades, patches, plugins, vulnerability remediation
• Use GitLab/GitHub, Terraform Enterprise, and JSON for CI/CD and deployments
• Lead troubleshooting calls and coordinate across cloud, app, security, and prod support teams
• Participate in on-call rotation and after-hours support when required

Skills

Splunk Enterprise

AWS

OpenTelemetry

Python automation

CI/CD

Education

Bachelor's degree in Computer Science/Information Systems or related field

Tools

GitLab

GitHub

Terraform Enterprise

JSON

CI/CD tooling

Amazon EC2

Application Load Balancer

CloudWatch

Job description

System One seeks a Senior Splunk & Observability Engineer to manage enterprise observability platforms within an AWS-based production environment. The role combines Splunk administration, AWS support, and automation to enhance monitoring and resiliency.

Responsibilities include SPL development, dashboards, data lifecycle management, and upgrades. You will collaborate across teams to ensure optimal performance and incident response.