We are seeking an experienced
Splunk Development Engineer to design, enhance, and support scalable Splunk solutions. This role involves developing new use cases, optimizing existing implementations, supporting operations, and ensuring efficient data ingestion and system performance. You will work closely with stakeholders and engineering teams to strengthen observability and operational excellence.
Key Responsibilities
- Identify and develop new Splunk use cases through log source research and collaboration with stakeholders
- Update and optimize existing Splunk use cases to improve search performance and adapt to changes in ingestion approaches
- Perform ingestion, parsing, and normalization of new data sources into Splunk using Splunk apps and configurations
- Develop custom Splunk apps, scripts, and automation to support data ingestion, transformation, validation, and system efficiency
- Provide technical support to Splunk Operations Engineers, including troubleshooting, root cause analysis, and issue resolution
- Create and maintain comprehensive technical documentation to support knowledge transfer, training, and operational continuity
- Maintain regular office attendance during designated working hours and provide incident response support outside working hours when required
Requirements
Must Have
- 3-5 years of hands-on experience working with Splunk
- Strong understanding of Splunk architecture, features, and capabilities
- Advanced proficiency in Splunk Search Processing Language (SPL)
- Experience with data ingestion, normalization, and performance optimization in Splunk
- Good understanding of SDLC and CI/CD practices
- Proficiency in Python scripting
- Experience with Git (GitLab) and modern branching workflows
- Solid understanding of IT infrastructure, including Operating Systems, Databases, and Network/Security devices
- Minimum Bachelor's Degree in Computer Science, Information Technology, or a related field
- Strong analytical thinking and problem-solving skills
- Good communication skills and ability to work with cross-functional stakeholders
- Only Singaporean / SPR may apply
Good to Have
- Splunk certifications (e.g., Splunk Core Certified Power User, Splunk Enterprise Certified Admin, etc.)
- Experience with public cloud platforms such as AWS and/or Azure
- Experience implementing serverless compute solutions (AWS Lambda or Azure Functions)
- Experience working on GCC (Government Commercial Cloud) environments
- Experience developing custom Splunk applications
