Jobs

Interviews
Job Alerts
Tools

Upskill and Grow with AI

Mock Interview Practice interviews in realistic simulations

Coding Practice Improve your coding skills with challenges

Certification Earn certifications to validate your skills

AI Learning Get trained with AI expert sessions

Career Path AI insights for smarter career decisions

AI Job Match Score AI-Powered Job Match Against Your Resume and Optimize Your Resume

Career Tools and Resources

Resume Builder Build Professional Resume with Ease

ATS Friendliness Check Check Resume Friendliness for Applicant Tracking Systems

Auto Apply Apply to hundreds of jobs on any platform effortlessly

Co-Pilot (Chrome Extension) Your AI Assistant for Seamless Browsing Efficiency

Interview Questions Streamline interviews with ready-to-use questions

Salaries Discover market-driven salary insights across skillsets and geographies

Companies Explore leading companies actively hiring talent
For Employers

Jobs

Interviews

Home
>
Jobs in remote
>
Rackspace Technology
>
Splunk Engineer

Splunk Engineer

Rackspace Technology

8 - 10 years

0 Lacs

remote india

Posted:15 hours ago| Platform: Foundit logo

Apply

Skills Required

splunk apis splunk itsi key-value parsing regex field extractions enterprise management and automation tools

Work Mode

On-site

Job Type

Full Time

Job Description

Role Profile: Splunk Engineer

Shift: 7 pm IST to 4 am IST

Responsibilities

Architect, engineer, implement, and administer Splunk solutions in highly available, redundant, distributed computing environments.

Lead design and deployment of new Splunk environments, including clustered, multi-site, and large-scale configurations.

Perform Splunk forwarder deployment, configuration, and troubleshooting across diverse platforms.

Integrate, curate, and normalize diverse log sources into Splunk, ensuring CIM compliance and high data fidelity.

Configure and maintain Splunk dashboards, searches, and alerts to meet PCI DSS logging requirements, and deliver evidentiary reports to auditors to support compliance verification

Develop advanced content for SIEM correlation, including custom correlation searches, dashboards, and alerts.

Administer, maintain, and tune Splunk components (Indexers, Search Heads, Forwarders, Cluster Masters, Deployer, Deployment Server, and License Master).

Proactively monitor platform health using internal logs, KPIs, and custom monitoring solutions to identify and address performance bottlenecks.

Lead capacity planning, storage forecasting, and continuity of operations for large Splunk deployments.

Optimize Splunk performance through configuration tuning, search optimization, and data model acceleration strategies.

Troubleshoot complex ingestion, performance, and search-related issues, identifying root causes and implementing sustainable fixes or workarounds.

Reproduce customer or internal issues, document findings, and work with Splunk Support or vendor engineers for resolution.

Create, maintain, and enforce Splunk engineering documentation, including SOPs, design diagrams, architecture runbooks, and KB articles.

Develop custom scripts and automation tools (e.g., Python, Bash, PowerShell) to improve Splunk administration, onboarding, and operational workflows.

Utilize Splunk APIs for integration with enterprise tools and automation frameworks.

Serve as a technical escalation point for Splunk Engineer I/II and Splunk Admin roles.

Administer, tune, and troubleshoot Splunk Enterprise Security, maintaining data models, correlation searches, and notable events pipeline.

Configure and manage HEC (HTTP Event Collector) connections and onboard new data sources.

Manage Splunk RBAC (Role-Based Access Control) including SAML and AD group integrations for search heads and API endpoints.

Collaborate with security, infrastructure, application, and DevOps teams to ensure Splunk aligns with enterprise monitoring, compliance, and operational goals.

Design and implement Splunk solutions supporting compliance frameworks (e.g., PCI DSS, HIPAA, SOX), including dashboard/report development and audit evidence.

Research, evaluate, and implement new Splunk apps, add-ons, and integrations to enhance platform capabilities.

Mentor junior Splunk engineers and guide cross-functional teams on Splunk best practices, search optimization, and data onboarding.

Requirements

8+ years of IT experience in technical engineering, security operations, or infrastructure roles.

5+ years of direct, hands-on Splunk engineering and administration experience in large-scale, distributed environments.

Expert-level knowledge of Splunk Enterprise and Splunk Enterprise Security, including architecture, clustering, and scaling strategies.

Proficiency in Linux/Unix administration and shell scripting.

Strong knowledge of Splunk APIs, including use for automation and tool integrations.

Expertise in regex, field extractions, and key-value parsing.

Strong programming/scriptingskills in one or more languages (Python, Bash, PowerShell, Perl, JavaScript).

Experience with storage systems (DAS, SAN, object storage) and understanding of their performance implications for Splunk indexing.

Solid understanding of networking (switches, routers, firewalls, load balancers, DNS, SSL/TLS) and how it impacts Splunk architecture.

Familiarity with Enterprise Management and automation tools.

Experience with Splunk ITSI (preferred) and other premium Splunk apps.

Strong knowledge of data formats including JSON, XML, and CSV.

Demonstrated experience delivering Splunk-based compliance reporting and audit support.

Strong communication skills for interacting with technical and non-technical stakeholders.

Proven ability to lead projects, mentor team members, and provide architectural guidance.

Education & Certifications

Bachelor's degree in Computer Science, Information Systems, or related technical field (or equivalent experience).

Splunk Certified Architect and/or Splunk Certified Consultant preferred.

Additional certifications in security, cloud, or automation tools are a plus.

More Jobs at Rackspace Technology

Data Architect (Azure and Databricks)

Gurgaon, Haryana, India

Experience: Not specified

Salary: Not disclosed

Sr. Tableau Engineer - IN

Kolkata, Mumbai, New Delhi, Hyderabad, Pune, Chennai, Bengaluru

5 - 8 yrs

INR 7 - 10 Lacs

Customer Data Engineer II-IN (R-21168)-MongoDB

India

2.0 - 2.0 yrs

Salary: Not disclosed

PMO Technical Director IN - Cloud

Gurgaon, Haryana, India

10.0 - 10.0 yrs

Salary: Not disclosed

PMO Technical Director IN - Cloud

Bengaluru, Karnataka, India

10.0 - 10.0 yrs

Salary: Not disclosed

Mock Interview

Practice Video Interview with JobPe AI

Start Job-Specific Interview

Start Your Job Search Today

Browse through a variety of job opportunities tailored to your skills and preferences. Filter by location, experience, salary, and more to find your perfect fit.

Job Application AI Bot

Apply to 20+ Portals in one click

Download Now

Download the Mobile App

Instantly access job listings, apply easily, and track applications.

Enhance Your Skills

Practice coding challenges to boost your skills

Start Practicing Now

Rackspace Technology

Cloud Computing

San Antonio

Login to

Please Verify Your Phone or Email

Confirm Action

Search

Profile

Upskill and Grow with AI

Splunk Engineer