Description

You will design, implement, and manage large-scale Splunk environments focused on ITSM and security monitoring.

This role is remote.

Responsibilities

• Design and maintain large-scale, geo-distributed Splunk environments including Indexer Clustering, Deployment Server, and Search Head Clustering.
• Optimize data ingestion, indexing pipelines, search performance, and manage data retention policies.
• Develop and troubleshoot complex data models within Splunk for ITSI to ensure CIM compliance.
• Write advanced SPL queries utilizing stats, transaction, timechart, eval, rex, and macros for complex analytics.
• Configure Splunk infrastructure, including Syslog servers and Forwarders, while managing licensing and indexing metrics.

Required Skills

• 10+ years of experience with Splunk administration and implementation.
• Expertise in Field Extraction and Transformations using Regular Expressions within Splunk.
• Proven experience installing, configuring, and administering Splunk Enterprise on Linux and Windows.
• Hands-on experience customizing Splunk dashboards and visualizations using tailored queries.
• Proficiency in using Splunk-DB Connect for real-time data integration with external databases.
• Expertise in Actuate Reporting development, deployment, and performance tuning.
• Strong capability in root cause analysis of performance issues using Splunk tooling.
• Experience with installing and implementing Splunk App for Enterprise Security.
• Knowledge of best practices for security protocols and KPI monitoring.

Preferred Skills

• Any Graduate degree.

Key Skills

Education

Any Gradute