Splunk Engineer

Job Title: Splunk - L3 Engineer Location: Melbourne, FL Job Type: Contract Job Summary: We are seeking an experienced and highly skilled Splunk L3 Engineer to join our infrastructure and monitoring team. The ideal candidate will have deep technical expertise in designing, implementing, and supporting Splunk solutions in both On-Premises and SaaS environments, especially in large-scale enterprise or service provider networks. The role demands hands-on experience across the full Splunk ecosystem (Core & ITSI), including clustering, onboarding, heavy forwarders, data parsing/indexing, and integration with cloud and third-party systems. Key Responsibilities: • Design, implement, configure, and support Splunk deployments (Search Heads, Indexers, Forwarders, Clustered Environments) in On-Prem and SaaS models. • Maintain and enhance multi-site clustered environments with high availability and scalability. • Lead log onboarding activities using diverse data ingestion methods: Monitoring, DB Connect, HEC, Syslog, and REST API. • Develop efficient and reusable SPL queries, Dashboards, Reports, Macros, and other knowledge objects. • Design and implement custom Heavy Forwarders for specific log ingestion and transformation requirements. • Implement data ingestion and parsing best practices: • Inputs (inputs.conf) • Parsing (props.conf, transforms.conf) • Indexing (indexes.conf) • Create data summaries via Summary Indexing, Report Acceleration, and Data Model Acceleration. • Ensure Splunk environment is compliant with standard operating procedures and security policies. • Integrate AWS log sources (e.g., CloudWatch, EC2, CloudTrail, Kinesis) into Splunk. • Collaborate with internal teams to drive automation and visibility improvements. • Support and optimize Splunk ITSI implementation, ensuring service reliability and monitoring efficiency. • Act as a subject matter expert and provide L3-level support for Splunk-related incidents and requests. Required Skills & Qualifications: • 5+ years of hands-on experience with Splunk Core and ITSI in complex environments. • Proven expertise in log ingestion, correlation, and visualization. • Strong knowledge of Linux/Unix systems and tools such as rsyslog, syslog-ng, net-snmp. • Experience working with cloud platforms, especially AWS (EC2, CloudWatch, Kinesis, etc.). • Strong scripting knowledge in Python, JavaScript, or other relevant languages for integrations. • Proficient understanding of logging protocols like Syslog and SNMP. • Excellent problem-solving skills and attention to detail. • Strong documentation, communication, and stakeholder engagement skills. Nice to Have: • Splunk Admin Certification (or equivalent advanced training). • Experience with databases and server-side scripting. • Exposure to Hadoop, MapReduce, or other data analytics platforms. • Background in DevOps, Software Engineering, or Infrastructure Automation. • Experience building and maintaining enterprise dashboards and alerts for operations teams.