Splunk ES Engineer

Enterprise Network Engineering

Design, implement, and support highly available network infrastructure across on-prem data centers, private cloud, AWS, and Azure. Engineer resilient Layer 2/Layer 3 architectures including routing, switching, BGP, OSPF, VXLAN/EVPN, and SDN technologies. Support enterprise resiliency and disaster recovery.

Infrastructure Automation

Build IaC solutions using Terraform; develop reusable modules and standardized deployment patterns. Automate network provisioning and configuration management. Integrate automation into Git-based CI/CD pipelines. Eliminate manual networking activities through automation-first engineering.

Scripting & Automation

Develop automation using Python, PowerShell, Bash, and REST APIs to handle provisioning, validation, compliance verification, drift detection, operational reporting, and health monitoring.

Network Isolation & Segmentation

Lead enterprise initiatives for network isolation, secure enclaves, air-gapped environments, Isolated Recovery Environments (IRE), secure management networks, and recovery architectures. Design secure separation between production, non-production, recovery, cyber recovery, and management networks.

Micro-Segmentation

Design and implement enterprise micro-segmentation using VMware NSX, Illumio, Cisco Secure Workload, cloud-native security groups, Azure NSGs, AWS Security Groups, and Network ACLs. Manage East-West traffic control, Zero Trust architectures, least-privilege access, dynamic policy enforcement, and application dependency mapping.

Cloud Networking

Engineer networking solutions across AWS (VPCs, Transit Gateway, Direct Connect, Route Tables, PrivateLink, Network Firewall) and Azure (VNets, ExpressRoute, Virtual WAN, Azure Firewall, NSGs, Application Gateway, Load Balancer).

Security Engineering

Collaborate with Cyber Security to implement Zero Trust networking, Network Access Control, secure remote connectivity, firewall architecture, IDS/IPS, DDoS protection, secure DNS, certificate management, and encryption in transit.

Resiliency Engineering

Design networking solutions supporting High Availability, Disaster Recovery, active-active/passive architectures, multi-region cloud deployments, automated failover, resilient routing, and critical application recovery.

Monitoring & Observability

Implement enterprise network observability using tools like ThousandEyes, SolarWinds, Dynatrace, Splunk, Grafana, Prometheus, and cloud-native monitoring. Develop dashboards, KPIs, and automated alerting for proactive network operations.

Requirements

• Enterprise network engineering (routing, switching, BGP, OSPF, VXLAN/EVPN, SDN).
• Hybrid cloud networking (5+ years supporting on-prem, private cloud, AWS, and Azure).
• Network isolation, secure enclave design, air-gapped environments, and recovery network architectures.
• Micro-segmentation (VMware NSX, Illumio, Cisco Secure Workload, cloud-native security groups).
• Zero Trust networking principles and least-privilege access.
• Infrastructure as Code using Terraform (3+ years) building reusable modules and standardized patterns.
• Scripting with Python, PowerShell, or Bash for provisioning, validation, compliance, drift detection, and monitoring.
• CI/CD pipeline integration (Git-based).
• AWS: VPCs, Transit Gateway, Direct Connect, Route Tables, PrivateLink, Network Firewall.
• Azure: VNets, ExpressRoute, Virtual WAN, Azure Firewall, NSGs, Application Gateway, Load Balancer.
• Firewall architecture, IDS/IPS, DDoS protection, secure DNS, encryption in transit.
• High Availability, Disaster Recovery, active-active/passive architectures, multi-region failover, automated failover.
• Tools: ThousandEyes, SolarWinds, Dynatrace, Splunk, Grafana, Prometheus, and cloud-native solutions.
• Dashboard development, KPI tracking, and automated alerting.

For applications and inquiries, contact:View email address on us.fitly.work