Description

You will manage and optimize a large distributed Splunk clustered environment and data routing pipelines.

This role is on-site.

Responsibilities

• Manage distributed Splunk clusters including Search Heads, Indexers, Cluster Master, Deployer, and Deployment Servers.
• Onboard application data to Splunk and deploy applications across various Splunk components.
• Configure and manage Cribl to route, transform, enrich, and reduce data before it reaches Splunk.
• Develop Splunk dashboards, reports, alerts, and visualizations while optimizing search performance.
• Automate operational tasks and deployment workflows using Python and Ansible.

Required Skills

• 8+ years of experience in Splunk administration and engineering.
• Expertise in managing Splunk components: Indexers, Search Heads, Cluster Master, and Forwarders.
• Hands-on experience with Cribl for data routing, reduction, and transformation.
• Proficiency in Splunk ITSI, including correlation searches and Glass Tables.
• Strong experience with Splunk addons such as DBConnect, ServiceNow, AWS, Azure, and Kafka.
• Skill in log parsing and data extraction using regex.
• Ability to automate tasks using Python and Ansible.
• Experience with Git, Bitbucket, Bamboo, and JIRA.
• Knowledge of masking sensitive data and ensuring security compliance.

Preferred Skills

• Experience integrating Cribl with Splunk HTTP Event Collection (HEC).
• Experience coordinating with onshore support teams and clients.

Key Skills

Education

Any Gradute