Splunk Architect (8-10 yrs)

Splunk Architect

Key Responsibilities :

- Architect and Design : Develop and implement Splunk solutions for enterprise environments.

- Deployment & Configuration : Install, configure, and maintain Splunk Enterprise and Splunk Cloud.

- Data Ingestion & Parsing : Ensure proper data onboarding, parsing, and indexing from various sources.

- Performance Optimization : Tune Splunk queries, dashboards, and reports for efficiency.

- Security & Compliance : Implement security best practices and ensure compliance with industry standards.

- Integration : Work with other IT teams to integrate Splunk with third-party tools.

- Troubleshooting : Diagnose and resolve Splunk-related issues.

- Training & Documentation : Provide guidance to teams and document best practices.

Required Skills :

- Strong expertise in Splunk Enterprise and Splunk Cloud.

- Experience with Splunk Search Processing Language (SPL).

- Knowledge of - log management, SIEM, and security analytics.

- Familiarity with - Linux, Windows, and cloud environments.

- Ability to create custom dashboards, reports, and alerts.

- Experience with machine learning and anomaly detection in Splunk.

- Strong problem-solving and analytical skills.

Preferred Qualifications :

- Splunk Certified Architect or Certified Admin.

- Experience with Python, Shell scripting, or PowerShell.

- Knowledge of AWS, Azure, or GCP for cloud-based Splunk deployments.