Senior Splunk & Observability Engineer

Job Description

Job Description

*** Applicants must be U.S. citizens, Green Card holders or current H-1B visa holders willing to transfer their visas ( H-1B visa transfer )***** Job Title: Senior Splunk & Observability Engineer Duration: Full Time / Permanent Position Location: Lafayette, LA, Knoxville, TN, Columbia, SC, Birmingham, AL Work Mode: 5 Days Onsite Position Description Systemone is seeking an experienced Senior Splunk & Observability Engineer to support enterprise scale observability platforms within a complex, AWS based production environment. This is a senior hands on role combining advanced Splunk administration and engineering, AWS production support, observability, and automation. The engineer will manage and support Splunk Enterprise running on AWS, working across the full data lifecycle from source onboarding and ingestion through indexing, search, dashboards, alerts, retention, and recovery. Responsibilities include developing and optimizing SPL queries, troubleshooting ingestion and performance issues, improving platform stability, supporting upgrades and vulnerability remediation, and restoring or replaying data following service interruptions. The role will also work extensively with AWS, Amazon CloudWatch, OpenTelemetry, and Python based automation to improve enterprise monitoring and resiliency. The engineer will build and maintain OpenTelemetry agents and collectors, support observability integrations across technology stacks, and help automate platform operations and vulnerability remediation. Your future duties and responsibilities

• Administer, engineer, upgrade, and support Splunk Enterprise in AWS.
• Deploy, configure, and troubleshoot Splunk components hosted on Amazon EC2.
• Manage the end to end Splunk data lifecycle, including ingestion, indexing, search, dashboards, alerts, retention, and recovery.
• Develop and optimize complex SPL queries and troubleshoot query performance issues.
• Build and maintain enterprise dashboards for production monitoring, resiliency, incident response, and outage triage.
• Troubleshoot ingestion failures, problematic indexes, missing or delayed data, unexpected data volume growth, and platform availability issues.
• Restore data flow and replay data following ingestion or platform interruptions.
• Optimize data ingestion and retention to reduce noise, storage consumption, and operating costs.
• Integrate Splunk, Amazon CloudWatch, and OpenTelemetry for logs, metrics, dashboards, and alerts.
• Develop Python based automation for observability and platform operations.
• Build and maintain OpenTelemetry agent and collector packages across multiple technology platforms.
• Support Splunk upgrades, patching, configuration changes, plugins, and vulnerability remediation.
• Use GitLab, GitHub, Terraform Enterprise, JSON, and CI/CD tooling to support infrastructure, configuration, automation, and package deployments.
• Lead technical troubleshooting calls and coordinate incident investigation and remediation across multiple teams.
• Participate in an on call rotation and provide after hours support when required for production incidents, upgrades, and planned changes.