Splunk Engineer
Experience: 7 + years
Location: Remote Opportunity based anywhere in Canada. Must be eligible to work in the country
We are seeking a highly skilled Splunk Administrator / Splunk Cloud Engineer to lead the design, implementation, and support of large-scale Splunk environments. The role involves managing multi-terabyte-per-day Splunk Cloud and AWS-based deployments, driving platform stability, performance, and security while partnering with application, infrastructure, and security teams.
Please note, this role is not able to offer visa transfer or sponsorship now or in the future*
Key Roles & Responsibilities
Lead implementation, administration, and support of Splunk Cloud environments processing multi-terabyte daily ingestion.
Design, deploy, and manage Splunk clusters on AWS capable of handling enterprise-scale data volumes.
Onboard and integrate new data sources using HEC, REST APIs, and third-party streaming tools.
Provide operational support for large Splunk implementations exceeding 400 TB/day of log ingestion.
Install, configure, and maintain Splunk Universal Forwarders across application, web, and database servers.
Perform Splunk upgrades, patching, and infrastructure maintenance in compliance with best practices.
Monitor, analyze, and remediate security vulnerabilities across Splunk platforms, add-ons, and applications.
Develop automation scripts to streamline Splunk administration and operational tasks.
Define, measure, and report KPIs and platform health metrics.
Build and maintain 24×7 monitoring and alerting to ensure high availability and optimal performance.
Optimize SPL queries and coach end users on Splunk best practices.
Evaluate, test, and deploy Splunk technical add-ons and applications.
Participate in on-call rotations, troubleshoot production issues, and ensure timely resolution.
Collaborate with Splunk Support and internal stakeholders to resolve complex issues.
Assess business and system changes for scope and impact on Splunk environments.
Maintain awareness of emerging technologies and recommend improvements to maximize Splunk value.
Provide consultative support to internal application, infrastructure, and security teams.
Communicate platform strategy, roadmap, and business value to senior and executive stakeholders.
Required Qualifications
7+ years of hands-on experience administering enterprise Splunk environments.
Strong experience with Splunk Cloud, Splunk Enterprise, and AWS infrastructure.
Expertise in high-volume log ingestion, indexing, and search optimization.
Solid knowledge of Linux/Unix systems, networking, and security concepts.
Experience with automation and scripting (Python, Shell, etc.).
Proven experience supporting 24×7 mission-critical platforms.
Excellent troubleshooting, communication, and stakeholder engagement skills.
This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.
Compensation: we are offering an annual salary between $56,650-103,000
Disclaimer: The salary, other compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.
At Cognizant, we're eager to meet people who believe in our mission and can make an impact in various ways! We strongly encourage you to apply even if you only meet the required skills listed. Consider what transferrable experience and skills make you an outstanding applicant and help us see how you'd be helpful to this role.
Cognizant will only consider applicants for this position who are legally authorized to work in Canada without requiring employer sponsorship, now or at any time in the future.
At Cognizant, we strive to provide flexibility wherever possible, and we are here to support a healthy work-life balance though our various wellbeing programs.
Note: The working arrangements for this role are accurate as of the date of posting. This may change based on the project you’re engaged in, as well as business and client requirements. Rest assured; we will always be clear about role expectations.
#CB
#IND123
The Cognizant community:
We are a high caliber team who appreciate and support one another. Our people uphold an energetic, collaborative and inclusive workplace where everyone can thrive.
- Cognizant is a global community with more than 300,000 associates around the world.
- We don’t just dream of a better way – we make it happen.
- We take care of our people, clients, company, communities and climate by doing what’s right.
- We foster an innovative environment where you can build the career path that’s right for you.
About us:
Cognizant (Nasdaq: CTSH) is an AI Builder and technology services provider, building the bridge between AI investment and enterprise value by building full-stack AI solutions for our clients. Our deep industry, process and engineering expertise enables us to build an organization’s unique context into technology systems that amplify human potential, realize tangible returns and keep global enterprises ahead in a fast-changing world. See how at www.cognizant.com or @cognizant.
Cognizant is an equal opportunity employer. Your application and candidacy will not be considered based on race, color, sex, religion, creed, sexual orientation, gender identity, national origin, disability, genetic information, pregnancy, veteran status or any other characteristic protected by federal, state or local laws.
If you have a disability that requires reasonable accommodation to search for a job opening or submit an application, please email [email protected] for roles based in the Americas or [email protected] for roles based in India.
Disclaimer:
Compensation information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.
Applicants may be required to attend interviews in person or by video conference. In addition, candidates may be required to present their current state or government issued ID during each interview.