L2 Splunk DevOps Engineer

Job Description: Role : Splunk DevOps Engineer – RTM Description The Splunk DevOps Engineer - RTM is responsible for driving the design, development, and automation of Splunk monitoring solutions within the RTM ecosystem. This role bridges Splunk development with modern DevOps practices,focusing on building custom Splunk Apps and Add-ons, automating deployment pipelines (CI/CD), writing efficient search logics (SPL), and managing data onboarding via automated infrastructure. Working within a self-sufficient Agile team, the ideal candidate will bring a strong analytical mindset to streamline monitoring capabilities, continuous integration, and platform automation for business and application teams. Key Responsibilities: Design and develop complex Splunk dashboards, interactive reports, saved searches, lookups, and alert frameworks. Build custom Splunk Apps and Add-ons from scratch, or rebuild and customize existing Splunkbase apps to suit business needs. Implement CI/CD pipelines (Git, Jenkins/Ansible) to automate the deployment, testing, and configuration management of Splunk apps and infrastructure. Optimize Search Processing Language (SPL) queries for maximum search efficiency, resource utilization, and performance. Manage advanced data onboarding, field extractions, and parsing using Regular Expressions (Regex) and automated ingestion routines. Utilize Python and Shell scripting to automate recurring maintenance, configuration updates, and integration tasks. Collaborate within Agile rituals (Sprint Planning, Reviews) to deliver robust monitoring capabilities transparently. Propose and enforce technical standards and Splunk best practices across the engineering and support teams. Knowledge & Skills: Engineering or IT Graduate with 4+ years of industry experience specializing in SplunkDevelopment and DevOps automation. Must Know (Expert / Intermediate Level): Core Splunk Development: 4+ years of experience in enterprise-level implementations, custom Splunk Apps/Add-ons creation, and advanced alert management. DevOps & Automation: Hands-on experience with Git/GitHub, CI/CD pipelines (Jenkins, GitLab CI, or similar), and automated deployment tools (Ansible/Puppet). Splunk Architecture: Practical experience with core components (Universal Forwarders, Heavy Forwarders, Indexers, Deployment Server, Search Heads, License Manager). SPL & Regex: Expert proficiency in writing optimized Search Processing Language (SPL) queries and Regular Expressions for data extraction. Scripting: Hands-on proficiency in Shell scripting and Python for automation and custom integrations. Operating Systems: Strong practical knowledge of Linux (RHEL/Ubuntu) and Windows environments. Agile Framework: Proven track record of working effectively in Agile/Scrum delivery models. Good to Have / Certifications: Splunk Power User, Advanced Power User, or Splunk Certified Developer certification. Knowledge of Kafka-based data ingestion pipelines. Familiarity with ITSM/Agile tools (ServiceNow, JIRA, Confluence). This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth. Company: Airbus India Private Limited Employment Type: Permanent ------- Experience Level: Professional Job Family: Digital By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus. Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief. Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to . At Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.