Splunk and Linux System Engineer

Splunk and Linux System Engineer (SRQ109759)

Company/ Mission description:
Excited to work on a project for a key player in the energy landscape? The Belgian, German and European energy landscape is in full swing. Did you know that Elia Group plays a crucial role in this? As part of Elia Group, a European transmission system operator, Elia Belgium and 50Hertz in Germany ensures the reliability and sustainability of the electricity supply in both countries. Side-by-side with other Contingent Workers and internal staff, you will play a part in building a sustainable, green and reliable energy infrastructure that stimulates economic growth and reduces our ecological footprint.

Service description:
The System Engineer supports Linux-based IT infrastructure and the Splunk platform. The role combines Linux system engineering with Splunk administration and engineering. The engineer is responsible for the timely resolution of incidents and service requests affecting Linux systems and Splunk services. They use Splunk and OS-level diagnostics to identify and resolve issues, perform routine maintenance, and implement system and platform changes in line with established processes and standards, ensuring minimal service disruption.

A key aspect of the role is the design, implementation, and continuous improvement of Splunk solutions, including data onboarding, forwarder configuration, indexes, sourcetypes, parsing, dashboards, reports, alerts, and field extractions. The engineer uses these capabilities to improve data quality, platform performance, and service visibility.

The engineer contributes to problem management by performing root cause analysis based on Splunk data, logs, and Linux system behaviour, and by proposing and implementing long-term corrective actions. They collaborate with cross-functional teams to ensure that data sources are correctly integrated into Splunk and that the supporting Linux systems remain secure, compliant, and reliable.

In addition to operational duties, the engineer participates in R&D activities, evaluates new Splunk capabilities, apps, add-ons, and integration methods, and contributes to solution prototypes. They drive automation through scripting and Infrastructure-as-Code to standardise Splunk and Linux configuration, reduce manual intervention, and increase platform reliability.

Requirements:

• Minimum 4 years of experience in IT operations, managing containerized, virtualized, and/or physical Linux-based infrastructure in large-scale environments (enterprise, governmental, or supranational)
• At least 2 years of hands-on experience administering and supporting Splunk environments in production.
• Dutch or French: Full professional / native proficiency + English: Professional working proficiency
• Ability to onboard and maintain data sources using Universal Forwarders, Heavy Forwarders, apps, add-ons, and standard ingestion methods.
• Practical knowledge of SPL for searches, dashboards, reports, alerts, field extraction, and operational troubleshooting.
• Experience monitoring Splunk platform health, investigating ingestion and search issues, and performing routine administration under established standards and procedures.
• Working understanding of:
• Indexes, sourcetypes, parsing, data retention, and role-based access concepts
• Metrics collection, log aggregation, dashboards, and alerting strategies
• Event correlation, basic anomaly investigation, and performance baselining
• Using Splunk to support incident detection, diagnosis, and reduction of MTTD/MTTR
• Able to implement defined solutions independently, document changes, and escate complex architecture or performance issues to senior engineers when required.
• End-to-end lifecycle management of Red Hat Enterprise Linux (or equivalent) environments
• Experience with enterprise tooling, including:
• Red Hat Satellite 6.x (provisioning, patching, lifecycle management)
• System performance tuning, troubleshooting, and OS-level diagnostics
• Strong experience with Ansible Automation Platform (playbooks, roles, automation workflows)
• Familiarity with Infrastructure-as-Code principles and pipeline integration
• Experience integrating automation with monitoring and operational workflows
• Practical experience with Git-based workflows (GitLab, Azure DevOps, or similar)
• Understanding of CI/CD pipelines for infrastructure and configuration deployment
• Experience with Red Hat container ecosystem, including:
• Podman / OCI containers
• Understanding of container monitoring and lifecycle operations
• Experience working within structured ITIL-aligned processes:
• Incident, problem, and change management
• Strong focus on monitoring-driven operations, diagnostics, and forens