Job Description & Details
This is a heavy-duty platform engineering role focused on modernizing enterprise cybersecurity infrastructure using Splunk. If you enjoy wrangling massive data streams, hardening Linux systems, and driving Zero Trust architecture for critical environments, this gig gives you the autonomy and scope to actually build things right.
What You'll Actually Be Doing
Your day-to-day will span the entire lifecycle of the Splunk platform. You aren't just writing queries; you are architecting scalable deployments, managing data onboarding pipelines, and building custom automation scripts to keep the environment locked down. Expect to juggle infrastructure updates via Ansible and Kubernetes while troubleshooting log ingestion bottlenecks and collaborating with security teams to ensure every data source maps cleanly to compliance and modernization goals.
The Core Tech Stack
Splunk Enterprise is the obvious anchor here, but you won't survive this role without a deeply ingrained Linux/Unix systems background. You need to be fluent in Python and Bash for writing robust automation tooling, while familiarity with Ansible, Kubernetes, and AWS infrastructure is non-negotiable for deploying and scaling these environments. They also expect you to natively understand Zero Trust principles so you can bake security directly into your architecture decisions.
Interview Expectations
Expect the hiring team to test your deep architectural knowledge of Splunk by asking how you would scale an enterprise cluster handling terabytes of daily ingestion while maintaining sub-second search speeds. They are looking to see if you understand bucket management, indexer clustering, and forwarder bottlenecks under high-pressure scenarios. You'll also likely be grilled on Linux internals and how you implement Zero Trust network segmentation within a containerized AWS ecosystem using tools like Ansible and Kubernetes.
Application Advice
Skip the generic system admin buzzwords and tailor your resume to scream 'Splunk Architect' and 'Automation Engineer.' Make sure your resume explicitly highlights your hands-on experience with Python, Bash, Ansible, and AWS alongside exact numbers on the scale of the Splunk environments you've managed. If you've previously built pipelines that adhere to Zero Trust compliance or security frameworks, put those achievements front and center to immediately clear the ATS and catch the hiring manager's eye.