Splunk & AWS Observability Engineer

GlobalLogic; Town of Poland (NY); On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Flexible opportunities

Relocation options

Comprehensive benefits

Career development

DE&I matters

Job summary

GlobalLogic is seeking an experienced Splunk Administrator to oversee enterprise Splunk deployments and integrate with AWS cloud services. The role emphasizes observability, data ingestion, and automation through Python or Shell scripting.

The candidate should bring experience in indexer cluster maintenance, search head configuration, and creating insightful dashboards for engineering and business teams. This is a hands-on, collaboration-heavy position with modern CI/CD pipelines.

Qualifications

• Minimum two years of Splunk administration in enterprise production environments.
• Official Splunk certification (Enterprise Certified Admin, Architect or Core Certified Consultant) preferred.
• Practical experience integrating Splunk with AWS cloud infrastructure and services.
• Strong capabilities in Python or Shell scripting for system automation and REST API integration.
• Deep technical expertise in observability, metrics and log analytics.
• Hands on experience with data ingestion, sourcetype management and custom parsing configurations.
• Solid knowledge of indexer cluster maintenance and search head configuration.

Responsibilities

• Integrate Splunk with AWS cloud services including CloudWatch, S3, EC2, Kinesis and container logs.
• Execute regular component updates and lifecycle management across Indexers, Search Heads and Forwarders.
• Conduct routine platform health checks, indexer cluster maintenance and system performance tuning.
• Onboard new data sources and manage custom parsing configurations.
• Automate routine maintenance, reporting and log parsing using Python or Shell scripts alongside Splunk REST APIs.
• Support deployment pipelines to enable seamless infrastructure provisioning with minimal manual intervention.
• Collaborate with stakeholders to optimize search query performance for both ad hoc and scheduled tasks.
• Design intuitive dashboards and telemetry visualizations for operational engineering and business teams.

Skills

Splunk administration

AWS integration

Python or Shell scripting

Observability & logging

Data ingestion

Sourcetype management

Indexer cluster maintenance

Tools

Splunk

AWS

REST APIs

CloudWatch

S3

EC2

Kinesis

Job description

GlobalLogic is seeking an experienced Splunk Administrator to oversee enterprise Splunk deployments and integrate with AWS cloud services. The role emphasizes observability, data ingestion, and automation through Python or Shell scripting.

The candidate should bring experience in indexer cluster maintenance, search head configuration, and creating insightful dashboards for engineering and business teams. This is a hands-on, collaboration-heavy position with modern CI/CD pipelines.