Splunk IT Engineer

Splunk IT Engineer | Splunk Enterprise / Log Management / Optimization

Location: European Union Only (EU-based candidates)
Work Format: Remote
English: Professional working proficiency
Eligibility: EU residency and work authorization verification required

About the Role

We are looking for an experienced Splunk IT Engineer to manage, optimize, and improve an on-premises Splunk Enterprise environment.

The primary focus of this role is log ingestion optimization, data volume reduction, license cost management, and efficient log storage and routing.

The ideal candidate has strong hands-on Splunk administration experience, understands complex log management architectures, and can implement practical solutions to reduce infrastructure and licensing costs while maintaining operational visibility.

You will work on improving Splunk performance, optimizing data pipelines, and developing sustainable log management strategies.

Key Responsibilities

Splunk Enterprise Administration

• Administer, maintain, and optimize on-premises Splunk Enterprise environments.
• Monitor platform health, performance, and resource utilization.
• Troubleshoot indexing, ingestion, and search performance issues.
• Maintain reliable log collection and processing workflows.

Log Filtering & Data Volume Optimization

• Analyze log ingestion patterns and identify opportunities to reduce unnecessary data.
• Implement filtering, sampling, and data transformation strategies.
• Optimize ingestion pipelines to reduce indexed data volume.
• Maintain the availability of critical operational and security logs.
• Improve data quality and consistency across log sources.

Log Routing & Pipeline Management

• Configure and optimize log routing using Cribl, Logstash, and/or Splunk Heavy Forwarders.
• Design efficient log processing and forwarding workflows.
• Implement routing rules based on data source, priority, and retention requirements.
• Troubleshoot log delivery, parsing, and ingestion issues.

License & Cost Optimization

• Analyze Splunk license utilization and identify cost-saving opportunities.
• Develop strategies to minimize unnecessary license consumption.
• Build dashboards for tracking ingestion volumes, license usage, and associated costs.
• Monitor log growth trends and recommend optimization measures.
• Provide reporting and visibility into Splunk resource consumption.

Storage Management & Archiving

• Optimize Splunk storage utilization and data retention policies.
• Manage log archiving and long-term storage strategies.
• Configure and maintain index lifecycle and retention settings.
• Support efficient data storage while meeting operational requirements.

Search & Dashboard Optimization

• Optimize Splunk searches and SPL queries for performance.
• Improve existing dashboards and reports.
• Identify inefficient searches and reduce unnecessary resource consumption.
• Develop operational dashboards for monitoring ingestion, storage, and platform performance.

Requirements

• Strong hands-on experience administering on-premises Splunk Enterprise.
• Proven experience with log filtering and ingestion volume reduction.
• Practical knowledge of Splunk licensing and license optimization.
• Experience with Cribl, Logstash, and/or Splunk Heavy Forwarders.
• Strong understanding of log routing, parsing, and data processing pipelines.
• Experience managing Splunk storage, retention, and log archiving.
• Ability to analyze and optimize log ingestion costs.
• Experience creating cost tracking and operational monitoring dashboards.
• Strong knowledge of SPL and Splunk search optimization.
• Experience troubleshooting Splunk performance and infrastructure issues.
• Strong analytical and problem-solving skills.
• Ability to communicate effectively with technical stakeholders in English.

Nice to Have

• Splunk Enterprise Certified Admin certification.
• Experience with large-scale, high-volume Splunk environments.
• Knowledge of Splunk indexing architecture and distributed deployments.
• Experience with Cribl Stream.
• Familiarity with observability and centralized logging architectures.
• Experience automating Splunk administration and monitoring tasks.
• Knowledge of infrastructure monitoring and security logging practices.

What We Offer

• Opportunity to work with complex enterprise logging infrastructure.
• Technically challenging tasks focused on performance and cost optimization.
• Collaboration with experienced infrastructure and operations teams.
• Opportunity to influence log management architecture and optimization strategies.

Location & Eligibility

This position is open exclusively to candidates located in European Union countries.

Documentation confirming location and legal work eligibility will be required during the selection process.

Interested?

If you have strong experience with Splunk Enterprise, log pipeline optimization, and reducing logging infrastructure costs, we would love to hear from you!

Apply now to discuss the opportunity.