Splunk & Linux System Engineer

Function

Our client is seeking an experienced system engineering professional to support a Linux-based infrastructure and a Splunk platform within a large-scale environment. This opportunity combines hands-on Linux operations with Splunk administration and engineering, with a strong focus on reliability, observability, automation, and continuous improvement.

Responsibilities

In this role, you will help ensure the stability and performance of critical infrastructure and monitoring services. Your work will include both day-to-day operations and longer-term improvements across Linux and Splunk environments.

• Resolve incidents and service requests affecting Linux systems and Splunk services in a timely manner.
• Use Splunk and operating system diagnostics to troubleshoot issues and minimise service disruption.
• Perform routine maintenance and implement system or platform changes in line with established standards and procedures.
• Design, implement, and continuously improve Splunk solutions, including data onboarding, forwarder configuration, indexes, sourcetypes, parsing, dashboards, reports, alerts, and field extractions.
• Support problem management through root cause analysis using Splunk data, logs, and Linux system behaviour.
• Propose and implement corrective actions to address recurring issues and improve platform reliability.
• Collaborate with cross-functional teams to ensure data sources are properly integrated and Linux systems remain secure, compliant, and dependable.
• Contribute to research and development activities, including the evaluation of new Splunk capabilities, apps, add-ons, and integration approaches.
• Help build solution prototypes and drive automation through scripting and Infrastructure-as-Code.

Technical Skills

• Minimum 4 years of experience in IT operations supporting containerized, virtualized, and/or physical Linux-based infrastructure in large-scale environments.
• At least 2 years of hands-on experience administering and supporting Splunk environments in production.
• Ability to onboard and maintain data sources using Universal Forwarders, Heavy Forwarders, apps, add-ons, and standard ingestion methods.
• Practical knowledge of SPL for searches, dashboards, reports, alerts, field extraction, and operational troubleshooting.
• Experience monitoring Splunk platform health, investigating ingestion and search issues, and performing administration within established procedures.
• Working understanding of indexes, sourcetypes, parsing, data retention, and role-based access concepts.
• Knowledge of metrics collection, log aggregation, dashboards, alerting strategies, event correlation, anomaly investigation, and performance baselining.
• Ability to use Splunk for incident detection, diagnosis, and reducing MTTD/MTTR.
• End-to-end lifecycle management of Red Hat Enterprise Linux or equivalent environments.
• Experience with Red Hat Satellite 6.x for provisioning, patching, and lifecycle management.
• Strong experience with Ansible Automation Platform, including playbooks, roles, and automation workflows.
• Familiarity with Infrastructure-as-Code principles and pipeline integration.
• Experience integrating automation with monitoring and operational workflows.
• Practical experience with Git-based workflows such as GitLab, Azure DevOps, or similar tools.
• Understanding of CI/CD pipelines for infrastructure and configuration deployment.
• Experience with container technologies in the Red Hat ecosystem, including Podman and OCI containers.
• Understanding of container monitoring and lifecycle operations.
• Experience in structured ITIL-aligned processes, including incident, problem, and change management, as well as service request handling.
• Strong focus on monitoring-driven operations, diagnostics, and forensics.
• Exposure to hardware lifecycle management, including server and firmware updates and lifecycle planning.
• Experience with VMware-based virtual environments and familiarity with NetApp storage systems.
• Experience with endpoint detection and protection tools such as Trend Micro Deep Security, ClamAV, or equivalent solutions.
• Understanding of how to integrate security signals into monitoring and alerting pipelines.
• Basic operational knowledge of network and security platforms such as Palo Alto, Check Point, F5, and InfoBlox.
• Ability to correlate infrastructure and network events for incident analysis.
• Solid scripting skills in Bash and/or Python.
• Ability to develop automation for monitoring, remediation, and reporting.
• Experience with vendor coordination, support processes, and licensing management.

Ideal Candidate

• Works confidently in complex enterprise environments and handles both operational support and technical improvement initiatives.
• Combines strong Linux expertise with a practical, production-focused understanding of Splunk.
• Is comfortable analysing logs, trends, and system behaviour to identify root causes and implement sustainable fixes.
• Communicates well with technical stakeholders and can escalate complex architecture or performance issues when needed.
• Documents changes carefully and works independently on defined solutions.
• Brings a structured, security-aware mindset and a strong interest in automation and operational reliability.

Practical Information

• Language requirements: Dutch or French at full professional/native level, and English at professional working proficiency.
• Work arrangement: onsite presence 2-3 days a week
• Work regime: full-time.
• non-EU candidates will not be considered

Contactperson & Reference

• Reference #: INW28391
• Isa Fars
• isa.fars@i4m.be