Splunk Platform Engineer

What success looks like in this role: Install, configure and maintain Splunk forwarders (127 in the estate) and onboard new data sources. Administer Splunk Cloud: app and version upgrades, certificates and RBAC. Plan and execute ACSC-approved changes in the change window, with rollback plans and post-change validation. Validate, remediate and execute change for Splunk vulnerabilities, including zero-day vulnerabilities, highest priority first. Support ITSI services, KPIs and episodes. Support OpenTelemetry collectors and Splunk Observability Cloud. Monitor Splunk system health using built-in and custom monitoring scripts and dashboards. Raise and track Splunk vendor cases once ACSC authorizes named Unisys personnel on the ACSC Splunk account.…