Splunk – Consultants

JD - Splunk – Consultants

Position Summary:

Splunk Engineer/Dev Ops is needed to develop and grow our Splunk environment and work with infrastructure and application teams not familiar with Splunk and manage clusters & data onboarding & incident management and dashboard works. This position will work closely with Infrastructure, Application, Network, Security, and Business Intelligence teams getting started with Splunk.

Mandatory Skills:

• Provide end-to-end technical oversight across all aspects of Splunk technology, including add-ons and knowledge objects, correlation searches, CIM.
• Monitor and maintain Splunk performance, availability, and capacity.
• Support large-scale deployments with data feeds from multiple tier deployment on-premises data centres and cloud environments.
• Knowledge of Splunk Premium apps such as ITSI, Splunk ES, Splunk UBA and predictive analysis use cases.
• High level understanding of Splunk Knowledge objects, Saved Searches, Reports/Alerts Development. 
•  Manage data onboarding flow Inputs(inputs.conf), Parsing (Props & transforms), Indexing (indexes.conf) and Searching (Props & transforms)
• Create data summary creations (Summary Index, Report acceleration and Data model acceleration), extensively used most of knowledge objects & components in Splunk, implemented best practices in platform.
• Maintain regulatory awareness and compliance.
• Manage Hec / Rsyslog / syslog Ng / net-SNMP (version 3) / Db connects.
• Support development of scripts (python, JavaScript, etc.) as needed in support of data collection or integration

Duties and Responsibilities:

• Develop scripts to automate tasks and manipulate data
• Fluent with Linux OS, including knowledge of applications such as Rsyslog / net-SNMP
• Manage data onboarding requests and work on best onboarding technique.
• Engage application and infrastructure teams to establish best practices for utilizing Splunk data and visualizations.
• Track work effectively in Agile methodology.
• Manage to be a Splunk language (SPL) expert and work on event management integration.
• Ability to work with GIT / Bit Bucket / Jira
• Create and maintain documentation related to architecture and operational processes for Splunk
   

Qualifications & Certifications:

•  Splunk Enterprise/Cloud - 3+ Years
•  Security Skills – 1+ Year
•  Networking / Syslog – 1+ Years
•  AWS/Azure Cloud – Knowledge
•  GIT/Bit Bucket – 1+ Years
•  Linux/Unix – 3+ Years
• Splunk premium apps (ITSI, ES, UBA) – Knowledge
• Scripting (Bash / Python / Java) – Knowledge
• Cribl – Awareness
• Splunk Admin Certification – Preferred