This role is part of Cognizant's engagement with one of our most strategic global technology clients — a world leader in enterprise networking, cybersecurity, and observability. You will work on complex Splunk app and integration environments supporting enterprise-scale data onboarding operations.
About The Role
We are seeking a Splunk Apps & Add-ons Engineer to provide advanced technical support for Splunk app installations, configurations, integrations, and data onboarding pipelines. This is a hands-on role for an engineer comfortable working across diverse data sources, third-party integrations, and complex parsing pipelines.
What You Will Do
- Provide technical support for Splunk Apps and Technology Add-ons including installation, configuration, upgrades, and troubleshooting
- Diagnose issues related to data ingestion, field extractions, sourcetypes, app compatibility, and configuration errors
- Analyse Splunk logs across forwarders, parsing pipelines, indexers, and apps
- Assist customers in integrating Splunk Apps/Add-ons with diverse data sources, APIs, cloud services, databases, and third-party tools
- Validate data collection configurations, source connectivity, and ingestion pipelines
- Ensure CIM compliance and proper data normalisation
- Replicate and reproduce issues in lab environments; collaborate with engineering teams for complex escalations
- Optimise Apps/Add-ons for efficient data ingestion; identify bottlenecks in parsing pipelines and resource utilisation
- Create and maintain knowledge articles, troubleshooting guides, and configuration documentation
What You Bring
- Hands-on experience installing, configuring, and upgrading Splunk Apps and TAs
- Strong SPL proficiency and understanding of data ingestion and parsing concepts
- Knowledge of sourcetypes, inputs, props and transforms configurations
- Intermediate experience in Search Head and Indexer Clustering
- Unix/Linux skills including file permissions, log analysis, and scripting (Shell/Python)
- Basic networking knowledge (TCP/IP, DNS, HTTP/S)
- Familiarity with API-based integrations
Technical Skills Splunk Enterprise/Cloud
- SPL
- Linux
- Python
- Shell
- AWS/Azure/GCP
- JIRA
- Git
