Description

You will manage, maintain, and develop the Enterprise Splunk SIEM environment across Windows, Linux, and cloud platforms.

This role is remote.

Responsibilities

• Design, deploy, and troubleshoot the Splunk environment, including configuration and role-based access control.
• Develop Python modules and event generators to instrument data feeds and write timestamped events to specific Splunk indices.
• Build abstraction layers and client modules using the Splunk SDK to interact with REST API endpoints.
• Automate configurations and deployments to Splunk Universal Forwarders and Splunk Clusters using Puppet modules.
• Deploy customized apps across development, staging, and production environments and collaborate with engineering teams to validate defect reporting.

Required Skills

• 10+ years of experience in Splunk development and administration.
• Proficiency in Python for module development, script automation, and XML stream processing.
• Strong experience with Splunk Enterprise REST API and SDKs.
• Hands-on experience with Windows, Linux, and Unix operating systems.
• Experience managing data pipelines using Splunk Data Stream Processor, SDC CLI, and Splunk SimData.
• Ability to use Puppet for configuration management.
• Background in integrating third-party visualization tools like Google Charts or Rickshaw.

Preferred Skills

• Bachelor’s degree in Computer Science or a closely related field.

Key Skills

Education

Any Graduate