Description

You will own the administration, architecture, and operational health of Splunk environments.

Responsibilities

• Administer and maintain clustered, on-prem Splunk Enterprise deployments, managing load balancers and HA setups.
• Develop and optimize complex Splunk Search Processing Language (SPL) queries for data extraction and analysis.
• Design and build interactive dashboards using SPL and XML to visualize operational insights.
• Engineer data ingestion pipelines from diverse sources, including AWS, DataBricks, and Snowflake, ensuring resilience.

Required Skills

• 7+ years of experience in IT infrastructure, systems, or security roles.
• Strong proficiency in Splunk administration, architecture, and troubleshooting.
• Expertise in writing and optimizing complex SPL queries, including transforming commands and sub searches.
• Experience managing data ingestion from cloud platforms (AWS, Snowflake) and data tools (DataBricks).
• Proficiency in scripting using Python, Bash, and PowerShell for automation.
• Solid understanding of IT networking, systems, and security principles necessary for complex troubleshooting.
• Experience integrating Splunk with ticketing and CMDB tools like ServiceNow and Archer.
• Familiarity with data forwarding mechanisms like Syslog-NG and Cribl.

Key Skills

Education

Bachelor's or Master's degrees