Splunk Engineer

Role and Responsibilities

Softility Inc. seeks a potential Splunk Data Admin or equivalent with minimum 5-6 years of experience to help with the design, development, and support of Splunk Infrastructure, applications and migrations to cloud.

This role will join the Softility - IT Cyber Security Practice team that is responsible for managing the global Splunk infrastructure of reputed clients with vast infrastructure located in various locations across the globe. This is a strategic position and will be instrumental in the design, implementation, support, performance, and integrity of the Splunk ecosystem. You will work closely with multiple stakeholders and global partners. This is a multi-disciplinary role that will interact directly with developers and different functional IT, Security and Engineering teams to;

1. Architect solutions for platform migrations from On-Prem Splunk to Splunk Cloud.

2. Integration of various applications and databases to Splunk SIEM for both On-Prem and Cloud.

3. Prepare the pre-requisites of infrastructure Splunk platform migrations.

4. Analyze the existing Splunk set-up to assess the data flow from log sources.

5. Identify the data size inflow to Splunk SIEM and charter action plan for optimization of data.

6. Independently manage and execute the admin one-time set up and admin on-going activities.

7. Deploy Splunk SIEM technology and other dependent resources to fulfill complete set up.

8. Capability to support end to end data migrations to Splunk cloud platforms.

9. Clearly communicate the risk stakes and business impact that may occur in infrastructure changes.

10. Brainstorm on the probable approaches and best practices in Splunk implementations.

11. Handle change management and work as On-Call if required.

Must Have:

• Minimum 3 years of experience in Splunk real-time deployments
• Minimum 3 years of experience in Splunk Administration and dashboard creations & reporting.
• Hands on experience in using version control tools such as Git/GitHub.
• Hands on with log management systems like syslog-ng or rsyslog.
• Intermediate or advanced level in any scripting or Python languages.
• Experienced in working with business partners to gather and interpret requirements
• Effective documentation, communication, and interpersonal skills able to collaborate within the immediate team as well as with other groups in IT.

Preferred Skills

• Hands-on experience in managing Splunk infrastructure, applications and data migrations.
• Splunk Architect certification or equivalent would be an added advantage.