Job Summary

Role Summary We are looking for an experienced Splunk Cloud Architect – L3 responsible for architecture, engineering, administration, performance optimization, and operational governance of enterprise-scale Splunk environments. The role will provide L3 technical leadership, drive platform reliability and observability improvements, resolve complex issues, and establish standards for onboarding, monitoring, security, and automation.

Key Responsibilities

Key Responsibilities Architect, administer, and optimize Splunk Cloud Platform environments for enterprise-scale workloads. Lead onboarding of infrastructure, applications, cloud platforms, security, and operational data sources. Design and optimize indexes, sourcetypes, data models, dashboards, alerts, and SPL/SPL2 searches. Configure and troubleshoot Universal/Heavy Forwarders, Deployment Server, HTTP Event Collector (HEC), APIs, syslog, and cloud integrations. Provide L3 troubleshooting for ingestion delays, parsing issues, search performance, forwarder connectivity, indexing, and platform availability. Develop enterprise observability and monitoring strategies, including integration with Splunk ITSI and Splunk Observability Cloud where applicable. Design ITSI services, KPIs, entity management, correlation searches, notable events, and service health dashboards. Implement capacity management and optimization practices covering data ingestion, retention, search performance, and license/usage consumption. Establish platform governance covering naming standards, RBAC, access controls, application onboarding, dashboard standards, and lifecycle management. Integrate Splunk with AWS, Azure, ServiceNow, Kubernetes, VMware, network/security platforms, databases, and enterprise applications. Create automation using REST APIs, Python, shell scripting, Git, CI/CD pipelines, and Infrastructure-as-Code practices where appropriate. Lead complex incident resolution, RCA, problem management, platform upgrades, migration activities, and performance improvement initiatives. Mentor L1/L2 engineers and produce architecture diagrams, SOPs, operational runbooks, troubleshooting guides, and technical standards.

Skill Requirements

Required Technical Skills Splunk Cloud Platform Splunk Enterprise Splunk ITSI Splunk Observability Cloud Advanced SPL Forwarders, HEC, APIs and data ingestion Indexing, parsing, field extraction and data models Dashboards, alerts and correlation RBAC and Splunk platform security Linux and networking fundamentals AWS/Azure integrations Python/Shell scripting and REST APIs ServiceNow/ITSM integration Enterprise observability and APM concepts

Other Requirements

Experience & Qualifications 8–12+ years of overall IT experience, with 5+ years of hands-on Splunk experience preferred for an L3/Architect role. Strong experience designing and supporting large-scale, business-critical Splunk environments. Demonstrated experience with Splunk Cloud migration, platform architecture, performance optimization, troubleshooting, and governance. Experience working within 24x7 enterprise operations and collaborating with infrastructure, cloud, application, network, security, and service-management teams. Splunk certifications such as Architect/Admin-level credentials are highly desirable. Strong stakeholder-management, documentation, troubleshooting, and technical-leadership skills.