{"id":3955609,"url":"https://alion.io/job/unisys-splunk-platform-engineer","title":"Splunk Platform Engineer","company":{"id":6839,"name":"Unisys","domain":"unisys.com","url":"https://alion.io/company/unisys","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":78,"open_postings":80,"ghost_share":0,"stale_share":0.863,"repost_share":0.013,"time_to_fill_p50_days":30,"computed_at":"2026-11-09T06:03:00Z"}},"role":"DevOps","role_family":"DevOps","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"Ansible","optional":false},{"name":"Apache Kafka","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Bash","optional":false},{"name":"CI/CD","optional":false},{"name":"Configuration Management","optional":false},{"name":"Docker","optional":false},{"name":"GCP","optional":false},{"name":"Git","optional":false},{"name":"ITIL","optional":false},{"name":"Kubernetes","optional":false},{"name":"LDAP","optional":false},{"name":"OpenTelemetry","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"ServiceNow","optional":false},{"name":"Splunk","optional":false},{"name":"Terraform","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-11-09T07:53:52Z","employer_posted_date":"2026-11-09","last_verified_at":"2026-11-09T07:53:52Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"What success looks like in this role:\nInstall, configure and maintain Splunk forwarders (127 in the estate) and onboard new data sources.\nAdminister Splunk Cloud: app and version upgrades, certificates and RBAC.\nPlan and execute ACSC-approved changes in the change window, with rollback plans and post-change validation.\nValidate, remediate and execute change for Splunk vulnerabilities, including zero-day vulnerabilities, highest priority first.\nSupport ITSI services, KPIs and episodes.\nSupport OpenTelemetry collectors and Splunk Observability Cloud.\nMonitor Splunk system health using built-in and custom monitoring scripts and dashboards.\nRaise and track Splunk vendor cases once ACSC authorizes named Unisys personnel on the ACSC Splunk account.\nWrite and maintain runbooks and service documentation; automate repeat work through ACSC-approved changes.\nHand over work in progress to Shift B during the 05:00-06:00 PT warm handover.\nDeploy, and maintain Splunk Enterprise and Splunk Cloud, including indexer clusters, search head clusters, heavy and universal forwarders, deployment servers, and license masters.\nManage capacity, performance tuning, and data retention. Monitor platform health and troubleshoot indexing, search, and forwarding issues.\nOnboard and normalize data sources (syslog, HEC, cloud logs, application and infrastructure logs). Write props/transforms and parsing configurations, and map data to CIM.\nAutomate deployments, upgrades, and configuration management with tools such as Ansible, Terraform, Git, and CI/CD pipelines.\nBuild and maintain apps, add-ons, dashboards, alerts, and reports. Write efficient SPL for stakeholders.\nImplement role-based access control, SSO/LDAP integration, encryption, and audit controls.\nPlan and execute upgrades, patching, migrations, and disaster recovery.\nPartner with security, SRE, and application teams. Document standards and runbooks, and mentor junior engineers.\n Participate in the on-call rotation for platform incidents.\nYou will be successful in this role if you have:\nBA/BS degree and 5+ years’ relevant experience OR equivalent combination of education and experience.\nOver 4 years of Hands-on Splunk administration, including Splunk Cloud and universal and heavy forwarders\nForwarder deployment and configuration management at scale (deployment server or equivalent).\nSplunk app, version and certificate management; role-based access control.\nLinux and Windows administration sufficient to troubleshoot forwarder hosts.\nChange management discipline in an ITIL-style environment, including working to approved change records.\nFamiliarity with vulnerability remediation and patch validation.\nClear written and spoken English; comfortable working a night-time shift pattern aligned to Pacific Time.\nSplunk Certified Admin or Splunk Core Certified Power User or higher.\nITSI and Splunk Observability Cloud experience; OpenTelemetry collector configuration.\nScripting (Python, Bash or PowerShell) and automation tooling.\nExperience with ServiceNow or a comparable ticketing system.\nExperience with cloud platforms (AWS, Azure, or GCP) and containers (Kubernetes, Docker).\nExperience with Splunk ITSI, Enterprise Security, SOAR, or Observability Cloud.\nKnowledge of OpenTelemetry, Cribl, Kafka, or other data pipeline tools.\nExperience with ITIL or Agile practices.\nUnisys is proud to be an equal opportunity employer that considers all qualified applicants without regard to age, blood type, caste, citizenship, color, disability, family medical history, family status, ethnicity, gender, gender expression, gender identity, genetic information, marital status, national origin, parental status, pregnancy, race, religion, sex, sexual orientation, transgender status, veteran status or any other category protected by law.\nLocal employment practices and rights may vary by jurisdiction and are subject to applicable local laws. This commitment includes our efforts to provide for all those who seek to express interest in employment the opportunity to participate without barriers.\nIf you are a US job seeker unable to review the job opportunities herein, or cannot otherwise complete your expression of interest, without additional assistance and would like to discuss a request for reasonable accommodation, please contact our Global Recruiting organization at . US job seekers can find more information about Unisys’ EEO commitment here.","description_format":"text","description_chars":4442,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"master","optional":false},"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Infrastructure & Networking Services","IT Help Desk & Service Desk","IT Consulting & Digital Transformation","Systems Integrators"],"lifecycle":[{"event":"open","at":"2026-11-09T07:53:52Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":30,"reasons":["conf:1","win:early","comp:brand"],"computed_at":"2026-11-09T09:25:00Z"},"pay":null,"html_url":"https://alion.io/job/unisys-splunk-platform-engineer","json_url":"https://alion.io/job/unisys-splunk-platform-engineer.json","meta":{"generated_at":"2026-11-09T09:25:00Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8971,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-10T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6839},"rest":"https://alion.io/mcp/rest/get_company?id=6839"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Funisys-splunk-platform-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Funisys-splunk-platform-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Funisys-splunk-platform-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/unisys-splunk-platform-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Funisys-splunk-platform-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3955609}},{"tool":"search_jobs","arguments":{"company":"unisys.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3955609},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}