What are the responsibilities and job description for the Splunk SaaS Engineer (Remote) position at Cognizant?
Job Summary
The Splunk Cloud L3 Support Engineer serves as a deep technical expert responsible for advanced design, configuration, integration, automation, and troubleshooting of Splunk Cloud environments. This role goes beyond L2 scope, focusing on complex issues, performance optimization, and strategic scaling to ensure high availability and compliance.
In This Role, You Will
Debug search performance with Job Inspector and search.log.
Investigate index replication lag (if Hybrid Search Head Clusters are used).
Conduct deep RCA for outages or recurring ingestion failures.
Manage HEC tokens and ACS API-based configuration changes.
Maintain limits.conf, props.conf, transforms.conf changes via app deployment.
Work with Splunk Support for backend configuration requests.
Implement line-breaking rules for multiline events.
Configure complex ingestion pipelines with filtering, masking, and routing.
Ensure full CIM data model compliance for Security/ITSI/ES apps.
Apply Workload Management rules to control resource usage.
Tune indexing performance by optimizing ingestion pipelines.
Monitor and respond to security events in internal audit indexes.
Apply encryption, masking, and anonymization for sensitive data.
Maintain compliance documentation for SOC 2, ISO, PCI-DSS, HIPAA.
Develop ACS CLI/REST API automation scripts for repeatable tasks.
Manage Splunkbase & private app lifecycle (install, upgrade, patch).
Coordinate maintenance windows with Splunk Cloud Operations.
Maintain CI/CD pipelines for Splunk configuration deployments.
Plan and execute index retention changes.
Work with Splunk on backend scaling requests.
Review and approve L2-created onboarding playbooks.
Work Model
At Cognizant, we strive to provide flexibility wherever possible, and we are here to support a healthy work-life balance though our various wellbeing programs. Based on this role’s business requirements, this is a remote position for applicants in the United States.
The working arrangements for this role are accurate as of the date of posting. This may change based on the project you’re engaged in, as well as business and client requirements. Rest assured; we will always be clear about role expectations.
We're excited to meet people who share our mission and can make an impact in a variety of ways. Don't hesitate to apply, even if you only meet the minimum requirements listed. Think about your transferable experiences and unique skills that make you stand out as someone who can bring new and exciting things to this role.
Salary And Other Compensation
Applications will be accepted until November 26, 2025
The annual salary for this position is between $91,000 to $107,000 depending on the experience and other qualifications of the successful candidate.
This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.
Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:
#CB #Ind123
The Splunk Cloud L3 Support Engineer serves as a deep technical expert responsible for advanced design, configuration, integration, automation, and troubleshooting of Splunk Cloud environments. This role goes beyond L2 scope, focusing on complex issues, performance optimization, and strategic scaling to ensure high availability and compliance.
In This Role, You Will
- Advanced Troubleshooting & RCA
Debug search performance with Job Inspector and search.log.
Investigate index replication lag (if Hybrid Search Head Clusters are used).
Conduct deep RCA for outages or recurring ingestion failures.
- Splunk Cloud Configuration Management
Manage HEC tokens and ACS API-based configuration changes.
Maintain limits.conf, props.conf, transforms.conf changes via app deployment.
Work with Splunk Support for backend configuration requests.
- Data Onboarding (Advanced & Custom)
Implement line-breaking rules for multiline events.
Configure complex ingestion pipelines with filtering, masking, and routing.
Ensure full CIM data model compliance for Security/ITSI/ES apps.
- Search & Performance Optimization
Apply Workload Management rules to control resource usage.
Tune indexing performance by optimizing ingestion pipelines.
- Security & Compliance
Monitor and respond to security events in internal audit indexes.
Apply encryption, masking, and anonymization for sensitive data.
Maintain compliance documentation for SOC 2, ISO, PCI-DSS, HIPAA.
- Integration & Automation
Develop ACS CLI/REST API automation scripts for repeatable tasks.
Manage Splunkbase & private app lifecycle (install, upgrade, patch).
- Change & Release Management
Coordinate maintenance windows with Splunk Cloud Operations.
Maintain CI/CD pipelines for Splunk configuration deployments.
- Capacity & Scaling
Plan and execute index retention changes.
Work with Splunk on backend scaling requests.
- Mentoring & Knowledge Sharing
Review and approve L2-created onboarding playbooks.
Work Model
At Cognizant, we strive to provide flexibility wherever possible, and we are here to support a healthy work-life balance though our various wellbeing programs. Based on this role’s business requirements, this is a remote position for applicants in the United States.
The working arrangements for this role are accurate as of the date of posting. This may change based on the project you’re engaged in, as well as business and client requirements. Rest assured; we will always be clear about role expectations.
We're excited to meet people who share our mission and can make an impact in a variety of ways. Don't hesitate to apply, even if you only meet the minimum requirements listed. Think about your transferable experiences and unique skills that make you stand out as someone who can bring new and exciting things to this role.
Salary And Other Compensation
Applications will be accepted until November 26, 2025
The annual salary for this position is between $91,000 to $107,000 depending on the experience and other qualifications of the successful candidate.
This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.
Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:
- Medical/Dental/Vision/Life Insurance
- Paid holidays plus Paid Time Off
- 401(k) plan and contributions
- Long-term/Short-term Disability
- Paid Parental Leave
- Employee Stock Purchase Plan
#CB #Ind123
Salary : $91,000 - $107,000