Splunk Apps & Add-ons Engineer (Tier II / Tier III)

This role is part of Cognizant's engagement with one of our most strategic global technology clients — a world leader in enterprise networking, cybersecurity, and observability. You will work on complex Splunk app and integration environments supporting enterprise-scale data onboarding operations.

About The Role

We are seeking a Splunk Apps & Add-ons Engineer to provide advanced technical support for Splunk app installations, configurations, integrations, and data onboarding pipelines. This is a hands-on role for an engineer comfortable working across diverse data sources, third-party integrations, and complex parsing pipelines.

What You Will Do

• Provide technical support for Splunk Apps and Technology Add-ons including installation, configuration, upgrades, and troubleshooting
• Diagnose issues related to data ingestion, field extractions, sourcetypes, app compatibility, and configuration errors
• Analyse Splunk logs across forwarders, parsing pipelines, indexers, and apps
• Assist customers in integrating Splunk Apps/Add-ons with diverse data sources, APIs, cloud services, databases, and third-party tools
• Validate data collection configurations, source connectivity, and ingestion pipelines
• Ensure CIM compliance and proper data normalisation
• Replicate and reproduce issues in lab environments; collaborate with engineering teams for complex escalations
• Optimise Apps/Add-ons for efficient data ingestion; identify bottlenecks in parsing pipelines and resource utilisation
• Create and maintain knowledge articles, troubleshooting guides, and configuration documentation
  
  

What You Bring

• Hands-on experience installing, configuring, and upgrading Splunk Apps and TAs
• Strong SPL proficiency and understanding of data ingestion and parsing concepts
• Knowledge of sourcetypes, inputs, props and transforms configurations
• Intermediate experience in Search Head and Indexer Clustering
• Unix/Linux skills including file permissions, log analysis, and scripting (Shell/Python)
• Basic networking knowledge (TCP/IP, DNS, HTTP/S)
• Familiarity with API-based integrations
  
  

Technical Skills Splunk Enterprise/Cloud

• SPL
• Linux
• Python
• Shell
• AWS/Azure/GCP
• JIRA
• Git