Splunk Platform Engineer

NETbuilder is a leading provider of technology solutions, software, consulting, and managed services. Since 1999, we have delivered end to end solutions across software delivery, development, and technology for clients in financial services, government, and commercial sectors. We are a security transformation consultancy with onshore, offshore, and onsite capabilities.

We’re hiring a hands-on Splunk Platform Engineer within our Enterprise Platforms to support and operate Splunk in an Enterprise environment. You’ll work on the monitoring and telemetry foundation that enables better incident response, operational insight, and system reliability.

This role focuses on day-to-day platform operations, data ingestion, and observability engineering, contributing to scalable, automated solutions as part of a collaborative team.

Key Responsibilities:

• Support data ingestion and onboarding, including Edge Processors and Ingest Actions
• Maintain and optimise ingestion pipelines across logs, metrics, and events
• High understanding of Splunk configurations and their optimization/impact for various conditions
• Ability to use Splunk for actionable alerts, and understand how to leverage observability tooling for operational visibility
• Implement parsing, enrichment, filtering, redaction, and data quality controls
• Monitor platform health and troubleshoot ingestion, indexing, and search issues
• Contribute to observability improvements (logging, metrics, alerting)
• Ability to use a variety of coding languages to support custom automations, actions and healing to maintain platform uptime
• Support cluster automation, API integrations, and platform tooling
• Work with AWS, Terraform, Salt/Ansible, and CI/CD practices
• Participate in production support, incident response, and on-call rotation

Skills & Experience:

• 2+ years’ experience in an operational/support role
• 1+ year hands-on Splunk experience
• Experience with data ingestion, onboarding, and pipeline support
• Hands-on with:
• SPL (searches, alerts, dashboards)
• Splunk configs (indexes, inputs, props/transforms)
• Python scripting and basic API development experience
• Familiarity with:
• Splunk clusters and automation
• Linux systems & Git workflows
• AWS, Terraform
• Salt or Ansible
• Understanding of observability principles (logging, metrics, sampling, retention)
• Exposure to ingest tools (e.g. Cribl, Logstash) is a plus, not essential
• Exposure to CI/CD tools (Jules, GitHub actions) is a plus, not essential
• Exposure to chaos engineering (e.g. Gremlin)
• Exposure to AI concepts, creating skills and understanding of MCP is a plus
• Splunk Power User and/or Admin certifications are a plus, but not required

Pay: $80,000.00 - $130,000.00 per year

Benefits:

• Health insurance
• Paid time off

Work Location: In person