Splunk Architect Engineer

Job Title : Splunk Onsite Engineer (ES App Observability and Log Management Functions)

Position Type : Full-Time, Onsite

Job Overview

We are seeking a skilled Splunk Onsite Engineer to join our team in Doha, Qatar. The primary focus will be on deploying, managing, and optimizing Splunk Enterprise Security (ES) for comprehensive log management and observability. You will play a critical role in ensuring the reliability, scalability, and efficiency of our on-premises Splunk infrastructure, supporting security operations, and driving actionable insights from machine data.

Key Responsibilities

• Deploy, configure, and maintain Splunk Enterprise in an on-premises environment.
• Manage ES Search Head, Indexers, and Indexer Storage, ensuring high availability and data integrity.
• Oversee data collection using Universal and Heavy Forwarders; troubleshoot and optimize data onboarding.
• Administer and monitor Splunk license usage, License Managers, and Cluster Managers.
• Develop, optimize, and maintain Splunk search queries, dashboards, and alerts for security and observability use cases.
• Collaborate with security, network, and IT teams to integrate diverse log sources and improve detection capabilities.
• Implement best practices for Splunk architecture, data retention, and search performance.
• Perform regular system health checks, upgrades, and patch management.
• Document configurations, processes, and changes for operational transparency and knowledge sharing.
• Provide onsite technical support and training for end-users and stakeholders.

Required Skills & Experience

Preferred Qualifications

Example Job Tasks

Notes

Candidates must be able to work onsite in Doha, Qatar.

Occasional off‑hours support may be required for critical incidents or maintenance.

Strong customer service and problem‑solving skills are essential.

#J-18808-Ljbffr