Description

You will own the configuration, maintenance, and optimization of the Splunk environment, ensuring reliable data ingestion and actionable security insights.

This role is hybrid.

Responsibilities

• Install, configure, and maintain Splunk infrastructure, apps, and knowledge objects across distributed environments.
• Manage end-to-end data ingestion, parsing, field mappings, and data normalization using the Common Information Model (CIM).
• Develop and maintain Splunk dashboards, reports, and scheduled searches to support operational and security monitoring needs.
• Monitor system performance, troubleshoot ingestion and search issues, and implement architectural best practices.
• Collaborate with operations and engineering teams to integrate Splunk solutions with cloud platforms and development workflows.

Required Skills

• 5+ years of experience as a Splunk administrator or in a similar infrastructure role.
• Deep understanding of Splunk architecture, data ingestion pipelines, and Search Processing Language (SPL).
• Proficiency in scripting with Python and Bash for automation and troubleshooting.
• Experience managing Splunk apps (TA installation) and connectivity troubleshooting.
• Hands-on experience with cloud platforms, specifically AWS and Azure.
• Familiarity with Jira and Confluence for ticket tracking and documentation.
• Knowledge of security monitoring concepts, including SIEM principles.

Key Skills

Education

Any Graduate