Job Summary
AppFolio is seeking a seasoned Splunk Engineer with a working knowledge of Terraform to enhance our observability and security capabilities. The role will focus primarily on managing and optimizing the Splunk platform with additional responsibilities around automating Splunk infrastructure and configurations using Terraform and CI/CD pipelines. This hybrid role supports both Security Operations and Infrastructure Automation initiatives and would suit candidates who are hands-on in Splunk
Responsibilities
Splunk Primary Responsibility
Design deploy and manage Splunk Enterprise/Splunk Cloud infrastructure.
Develop and maintain dashboards alerts correlation searches and data models to support security and operational monitoring.
Integrate and onboard custom data sources into Splunk from cloud platforms network devices and applications.
Monitor license usage index performance and data retention to optimize the Splunk environment.
Support SOC or other monitoring teams with incident detection analysis and response using Splunk.
Create and maintain knowledge objects (macros lookups tags event types etc.
Implement Splunk best practices and ensure data hygiene.
Terraform Secondary Responsibility
Use Terraform to automate and manage Splunk infrastructure components (e.g. deployment of apps role management configuration automation).
Integrate Terraform with CI and CD tools e.g. GitHub Actions Jenkins GitLab) to enable automated deployments and updates to the Splunk environment.
Maintain Terraform modules and state for infrastructure that supports Splunk operations e.g. AWS resources storage IAM policies monitoring).
Collaborate with DevOps and Cloud teams to enforce automation and infrastructure consistency.
Technical Skills Required
Splunk Core Certified Power User or higher preferred.
Strong experience in SPL Search Processing Language
Hands-on experience with Splunk Enterprise Security ITSI or SOAR
Experience with Terraform and writing HCL scripts.
Working knowledge of CI and CD tools and integrating infrastructure code into deployment pipelines.
Familiarity with cloud platforms (AWS Azure GCP) and basic infrastructure management.
Understanding of DevSecOps concepts and security telemetry.
Certifications Required
Splunk Core Certified Power User or higher preferred.
What we offer
- The chance to work with impact. Here, you’re empowered to bring your biggest thinking to help our company and clients improve everyday life.
- Ownership over your career. Stay at the top of your game through our award-winning learning and development ecosystem. And when your ambitions change or we offer new opportunities, we help you pivot by providing reskilling, on-the-job learning and guidance to find new roles that might be a better fit.
- The opportunity to thrive on a high caliber team with heart. We celebrate each other’s experiences and perspectives and promote a sense of belonging through our affinity groups and diversity and inclusion initiatives.
- A comprehensive total rewards package, including a competitive salary and a pension plan with matching contributions.
- Flexible health and financial benefits to support you and your eligible dependents—from day one.
- True work-life balance. Be at your best through paid time off, flexible work arrangements, volunteering opportunities, social events, and so much more.
About us
Cognizant (Nasdaq: CTSH) is an AI Builder and technology services provider, building the bridge between AI investment and enterprise value by building full-stack AI solutions for our clients. Our deep industry, process and engineering expertise enables us to build an organization’s unique context into technology systems that amplify human potential, realize tangible returns and keep global enterprises ahead in a fast-changing world. See how at www.cognizant.com or @cognizant.
Other employment-related information
Cognizant is an equal opportunity employer. Your application and candidacy will not be considered based on race, color, sex, religion, creed, sexual orientation, gender identity, national origin, disability, genetic information, pregnancy, veteran status or any other characteristic protected by federal, provincial or local laws.
If you have a disability that requires reasonable accommodation to search for a job opening or submit an application, please email [email protected] with your request and contact information.
Language requirements vary depending on roles, but we ask that all candidates have basic English proficiency for company-wide communications purposes. For roles based in Quebec, professional English proficiency is required, as you’ll deliver services to and collaborate with stakeholders outside the province who may not speak French.
