Splunk Engineer
Experience: 7 + years
Location: Remote Opportunity based anywhere in Canada. Must be eligible to work in the country
We are seeking a highly skilled Splunk Administrator / Splunk Cloud Engineer to lead the design, implementation, and support of large-scale Splunk environments. The role involves managing multi-terabyte-per-day Splunk Cloud and AWS-based deployments, driving platform stability, performance, and security while partnering with application, infrastructure, and security teams.
Please note, this role is not able to offer visa transfer or sponsorship now or in the future*
Key Roles & Responsibilities
Lead implementation, administration, and support of Splunk Cloud environments processing multi-terabyte daily ingestion.
Design, deploy, and manage Splunk clusters on AWS capable of handling enterprise-scale data volumes.
Onboard and integrate new data sources using HEC, REST APIs, and third-party streaming tools.
Provide operational support for large Splunk implementations exceeding 400 TB/day of log ingestion.
Install, configure, and maintain Splunk Universal Forwarders across application, web, and database servers.
Perform Splunk upgrades, patching, and infrastructure maintenance in compliance with best practices.
Monitor, analyze, and remediate security vulnerabilities across Splunk platforms, add-ons, and applications.
Develop automation scripts to streamline Splunk administration and operational tasks.
Define, measure, and report KPIs and platform health metrics.
Build and maintain 24×7 monitoring and alerting to ensure high availability and optimal performance.
Optimize SPL queries and coach end users on Splunk best practices.
Evaluate, test, and deploy Splunk technical add-ons and applications.
Participate in on-call rotations, troubleshoot production issues, and ensure timely resolution.
Collaborate with Splunk Support and internal stakeholders to resolve complex issues.
Assess business and system changes for scope and impact on Splunk environments.
Maintain awareness of emerging technologies and recommend improvements to maximize Splunk value.
Provide consultative support to internal application, infrastructure, and security teams.
Communicate platform strategy, roadmap, and business value to senior and executive stakeholders.
Required Qualifications
7+ years of hands-on experience administering enterprise Splunk environments.
Strong experience with Splunk Cloud, Splunk Enterprise, and AWS infrastructure.
Expertise in high-volume log ingestion, indexing, and search optimization.
Solid knowledge of Linux/Unix systems, networking, and security concepts.
Experience with automation and scripting (Python, Shell, etc.).
Proven experience supporting 24×7 mission-critical platforms.
Excellent troubleshooting, communication, and stakeholder engagement skills.
This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.
Compensation: we are offering an annual salary between $56,650-103,000
Disclaimer: The salary, other compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.
At Cognizant, we're eager to meet people who believe in our mission and can make an impact in various ways! We strongly encourage you to apply even if you only meet the required skills listed. Consider what transferrable experience and skills make you an outstanding applicant and help us see how you'd be helpful to this role.
Cognizant will only consider applicants for this position who are legally authorized to work in Canada without requiring employer sponsorship, now or at any time in the future.
At Cognizant, we strive to provide flexibility wherever possible, and we are here to support a healthy work-life balance though our various wellbeing programs.
Note: The working arrangements for this role are accurate as of the date of posting. This may change based on the project you’re engaged in, as well as business and client requirements. Rest assured; we will always be clear about role expectations.
#CB
#IND123
