Splunk and Linux System Engineer

Join a major organization operating critical infrastructure in the European energy sector as a Splunk & Linux System Engineer.

This role combines Linux infrastructure engineering and Splunk platform administration to ensure reliable, secure and efficient IT operations in a large-scale enterprise environment.

Working alongside internal IT teams and external specialists, you will contribute to incident resolution, monitoring improvements, automation and the continuous evolution of Linux and Splunk services.

The position is based in Schaerbeek, Brussels, on a full-time basis, with remote working arrangements subject to the organization’s applicable policy.

Responsibilities

• Administer, maintain and troubleshoot Linux-based infrastructure and Splunk production environments.
  • Manage incidents, service requests, routine maintenance and platform changes.
  • Design, deploy and improve Splunk data ingestion using Universal Forwarders, Heavy Forwarders, apps and add‑ons.
  • Configure indexes, sourcetypes, parsing, field extractions, dashboards, reports and alerts.
  • Monitor Splunk platform health and resolve ingestion, search and performance issues.
  • Perform root cause analysis using Splunk data, logs and Linux diagnostics.
  • Maintain Linux systems throughout their lifecycle, including provisioning, patching and performance optimization.
  • Implement automation using Ansible, Bash, Python and Infrastructure-as-Code practices.
  • Support containerized and virtualized infrastructure operations.
  • Integrate infrastructure monitoring, alerting and operational automation workflows.
  • Participate in R&D activities, technical evaluations and solution prototyping.
  • Collaborate with cross-functional teams to maintain secure, compliant and reliable services.
  • Document technical changes and elevate complex issues where appropriate.

Must have

• Minimum 4 years of IT operations experience managing Linux-based infrastructure in large-scale environments.
  • Minimum 2 years of hands-on Splunk administration and production support.
  • Strong experience with Red Hat Enterprise Linux or equivalent.
  • Ability to configure and maintain Splunk Universal Forwarders, Heavy Forwarders, data sources, apps and add‑ons.
  • Practical knowledge of Splunk Search Processing Language (SPL), dashboards, reporting, alerts and field extraction.
  • Understanding of Splunk indexes, sourcetypes, parsing, data retention and role-based access.
  • Experience with Splunk platform monitoring, ingestion troubleshooting and search diagnostics.
  • Linux performance tuning, troubleshooting and OS-level diagnostics.
  • Experience with Red Hat Satellite 6.x for provisioning, patching and lifecycle management.
  • Strong knowledge of Ansible Automation Platform, including playbooks, roles and automation workflows.
  • Experience with Git‑based workflows and understanding of CI/CD and Infrastructure-as-Code principles.
  • Knowledge of Podman/OCI containers and their monitoring and lifecycle operations.
  • Experience with ITIL-aligned incident, problem, change and service request management.
  • Scripting skills in Bash and/or Python.
  • Ability to work independently, document changes and collaborate with technical teams.
  • Full professional or native proficiency in French or Dutch, plus professional working proficiency in English.
  • Ability to work full-time in Brussels under the applicable remote work policy.
  • Valid Belgian work and residence authorization where required for non‑EU candidates.

Should have

• Experience improving monitoring, log aggregation, event correlation and alerting strategies.
  • Ability to use Splunk data for incident investigation, anomaly detection and performance baselining.
  • Experience integrating automation with monitoring and remediation workflows.
  • Experience managing VMware-based virtual infrastructure.
  • Understanding of security monitoring and the integration of security events into alerting pipelines.
  • Experience with enterprise infrastructure operations, diagnostics and forensic investigation.

Nice to have

• Exposure to physical server and firmware lifecycle management.
  • Familiarity with NetApp storage systems.
  • Experience with Trend Micro Deep Security, ClamAV or equivalent endpoint protection tools.
  • Basic operational knowledge of Palo Alto, Check Point, F5 and InfoBlox.
  • Experience correlating infrastructure and network events.
  • Experience coordinating with vendors and managing support and licensing processes.
  • Interest in evaluating new Splunk capabilities, integrations and technical prototypes.

Who we ar