Splunk Platform Engineer
Unisys Corporation3 days ago
Bengaluru, IndiaSenior
Responsibilities
- Install, configure, administer, upgrade, patch, and maintain Splunk Enterprise, Splunk Cloud, forwarders, indexer clusters, search head clusters, deployment servers, and license masters.
- Onboard and normalize syslog, HEC, cloud, application, and infrastructure data sources using props, transforms, parsing configurations, and CIM mappings.
- Manage Splunk capacity, performance, retention, health monitoring, indexing, search, forwarding, certificates, RBAC, SSO/LDAP, encryption, and audit controls.
- Support Splunk ITSI, KPIs, episodes, Splunk Observability Cloud, and OpenTelemetry collectors.
- Automate deployments, upgrades, configuration management, and repeat work using approved changes and automation tooling.
- Build and maintain Splunk apps, add-ons, dashboards, alerts, reports, and efficient SPL for stakeholders.
- Execute approved changes, vulnerability remediation, migrations, disaster recovery activities, rollback plans, validation, and post-change checks.
- Troubleshoot platform incidents, participate in on-call rotations and shift handovers, raise vendor cases, and partner with security, SRE, and application teams.
- Maintain documentation and runbooks and mentor junior engineers.
Requirements
- BA/BS degree and 5+ years of relevant experience, or an equivalent combination of education and experience.
- More than 4 years of hands-on Splunk administration, including Splunk Cloud and universal and heavy forwarders.
- Experience deploying and configuring forwarders at scale and managing Splunk apps, versions, certificates, and role-based access control.
- Linux and Windows administration skills sufficient to troubleshoot forwarder hosts.
- Experience with approved change records, ITIL-style change management, vulnerability remediation, and patch validation.
- Splunk Certified Admin, Splunk Core Certified Power User, or a higher certification.
- Experience with ITSI, Splunk Observability Cloud, and OpenTelemetry collector configuration.
- Scripting experience in Python, Bash, or PowerShell and experience with automation tooling.
- Experience with ServiceNow or a comparable ticketing system.
- Experience with AWS, Azure, or GCP and containers including Kubernetes or Docker.
- Knowledge of Splunk Enterprise Security, SOAR, Cribl, Kafka, or other data pipeline tools is preferred.
- Clear written and spoken English and willingness to work a Pacific Time night-shift pattern.
Benefits
- Night-time shift pattern aligned to Pacific Time with a 05:00-06:00 PT warm handover and participation in an on-call rotation.
- Equal opportunity employment and reasonable-accommodation support are described for qualified applicants.
Tech Stack
AnsibleApache KafkaAWSAzureBashDockerGitGoogle Cloud PlatformKubernetesLinuxPowerShellPythonSplunkTerraformWindows
Categories
About Unisys Corporation
Unisys Corporation provides IT services, consulting, and software for enterprises and public-sector agencies, including digital workplace, cloud and infrastructure, cybersecurity, and enterprise computing/mainframe systems. The company was formed in 1986 and is headquartered in Blue Bell, Pennsylvania; it is publicly traded on the NYSE. Unisys works across regulated industries such as government, financial services, and transportation, offering managed services and mission-critical solutions.