Description

You will lead the design, implementation, and administration of enterprise Splunk architectures and solutions.

This role is remote.

Responsibilities

• Design and implement Splunk architecture, including Indexers, Deployment Servers, Search Heads, and Forwarder management.
• Manage the full information lifecycle: search, investigation, knowledge addition, monitoring, alerting, and reporting.
• Optimize Splunk infrastructure through capacity planning, scalability monitoring, and performance tuning.
• Configure Syslog servers to forward logs via TCP and UDP protocols.
• Troubleshoot indexing issues by analyzing internal logs such as splunkd.log and metrics.log.

Required Skills

• 10+ years of experience in Splunk administration and engineering.
• Expertise in Splunk Enterprise installation and configuration on Linux and Windows servers.
• Deep experience with Field Extractions and Transformations using RegEx.
• Proven ability to install and implement Splunk App for Enterprise Security.
• Hands-on experience with Universal Forwarders and Heavy Forwarders.
• Advanced proficiency in writing Splunk Queries for searching, monitoring, and visualizing logs.
• Skill in customizing Splunk dashboards, visualizations, and configurations.
• Experience using Splunk DB Connect for real-time data integration with external databases.
• Expertise in Actuate Reporting, including development, deployment, and performance tuning.

Preferred Skills

• Knowledge of Agile and Scrum implementation processes.
• Ability to monitor license usage, indexing metrics, and index performance to ensure SOX compliance.

Key Skills

Education

Any Graduate