L2 Splunk DevOps Engineer

Role : Splunk DevOps Engineer – RTM

Description

The Splunk DevOps Engineer - RTM is responsible for driving the design, development, and automation of Splunk monitoring solutions within the RTM ecosystem. This role bridges Splunk development with modern DevOps practices,focusing on building custom Splunk Apps and Add-ons, automating deployment pipelines (CI/CD), writing efficient search logics (SPL), and managing data onboarding via automated infrastructure. Working within a self-sufficient Agile team, the ideal candidate will bring a strong analytical mindset to streamline monitoring capabilities, continuous integration, and platform automation for business and application teams.

Key Responsibilities:

- Design and develop complex Splunk dashboards, interactive reports, saved searches, lookups, and alert frameworks.

- Build custom Splunk Apps and Add-ons from scratch, or rebuild and customize existing Splunkbase apps to suit business needs.

- Implement CI/CD pipelines (Git, Jenkins/Ansible) to automate the deployment, testing, and configuration management of Splunk apps and infrastructure.

- Optimize Search Processing Language (SPL) queries for maximum search efficiency, resource utilization, and performance.

- Manage advanced data onboarding, field extractions, and parsing using Regular Expressions (Regex) and automated ingestion routines.

- Utilize Python and Shell scripting to automate recurring maintenance, configuration updates, and integration tasks.

- Collaborate within Agile rituals (Sprint Planning, Reviews) to deliver robust monitoring capabilities transparently.

- Propose and enforce technical standards and Splunk best practices across the engineering and support teams.

Knowledge & Skills:

Engineering or IT Graduate with 4+ years of industry experience specializing in SplunkDevelopment and DevOps automation.

Must Know (Expert / Intermediate Level):

- Core Splunk Development: 4+ years of experience in enterprise-level implementations, custom Splunk Apps/Add-ons creation, and advanced alert management.