Description

Manage and maintain the Splunk platform infrastructure and configuration within a large-scale network environment.

You will own the release pipeline

Responsibilities

• Implement and standardize Splunk forwarder deployment and maintenance across UNIX and Windows platforms.
• Monitor Splunk performance, availability, capacity, and resource utilization including CPU, memory, and storage.
• Develop advanced queries, summary indexes, data models, dashboards, and visualizations using SPL.
• Automate tasks and data manipulation using scripting, regular expressions, and KV store management.
• Troubleshoot complex issues, identify inefficient searches, and ensure data quality for specific use cases.

Required Skills

• 5+ years of experience in Splunk engineering, administration, and deployment.
• Deep knowledge of Splunk architecture, including indexers, search heads, deployment servers, and forwarders.
• Expertise in SPL commands for streaming, generating, transforming, and orchestrating datasets.
• Hands-on experience with Linux and UNIX environments.
• Proficiency in scripting and automation using Python, Shell, or Bash.
• Experience with Git for source code management.
• Ability to manage index and search-time field extractions.
• Experience managing access controls to sensitive logs and data.

Preferred Skills

• Splunk Administrator or Architect certification.
• Experience with Ansible and AWS or Kubernetes integration with Splunk.

Key Skills

Education

ANY GRADUATE