Splunk Engineer

Job Description:NETbuilder is a leading provider of technology solutions, software, consulting, and managed services. Since 1999, we have delivered end to end solutions across software delivery, development, and technology for clients in financial services, government, and commercial sectors. We are a security transformation consultancy with onshore, offshore, and onsite capabilities.We’re hiring a hands-on Splunk Platform Engineer within our Enterprise Platforms to support and operate Splunk in an Enterprise environment. You’ll work on the monitoring and telemetry foundation that enables better incident response, operational insight, and system reliability.This role focuses on day-to-day platform operations, data ingestion, and observability engineering, contributing to scalable, automated solutions as part of a collaborative team.Key Responsibilities:Support data ingestion and onboarding, including Edge Processors and Ingest ActionsMaintain and optimise ingestion pipelines across logs, metrics, and eventsHigh understanding of Splunk configurations and their optimization/impact for various conditionsAbility to use Splunk for actionable alerts, and understand how to leverage observability tooling for operational visibilityImplement parsing, enrichment, filtering, redaction, and data quality controlsMonitor platform health and troubleshoot ingestion, indexing, and search issuesContribute to observability improvements (logging, metrics, alerting)Ability to use a variety of coding languages to support custom automations, actions and healing to maintain platform uptimeSupport cluster automation, API integrations, and platform toolingWork with AWS, Terraform, Salt/Ansible, and CI/CD practicesParticipate in production support, incident response, and on-call rotationSkills & Experience:2+ years’ experience in an operational/support role1+ year hands-on Splunk experienceExperience with data ingestion, onboarding, and pipeline supportHands-on with:SPL (searches, alerts, dashboards)Splunk configs (indexes, inputs, props/transforms)Python scripting and basic API development experienceFamiliarity with:Splunk clusters and automationLinux systems & Git workflowsAWS, TerraformSalt or AnsibleUnderstanding of observability principles (logging, metrics, sampling, retention)Exposure to ingest tools (e.g. Cribl, Logstash) is a plus, not essentialExposure to CI/CD tools (Jules, GitHub actions) is a plus, not essentialExposure to chaos engineering (e.g. Gremlin)Exposure to AI concepts, creating skills and understanding of MCP is a plusSplunk Power User and/or Admin certifications are a plus, but not required