Splunk Technical Architect - Configuration Management (4-8 yrs)

Job Title : Splunk Technical Architect / SME

Location : Ghansoli, Navi Mumbai (Preferred)

Experience : 4-8 Years

Job Description :

The Splunk Technical Architect/SME will act as a technical and solution expert, responsible for designing, implementing, and maintaining Splunk solutions in large-scale environments. The role includes architecture design, deployment, performance optimization, and collaboration with various teams to ensure Splunk meets business and operational requirements effectively.

Key Responsibilities :

Solution Architecture :

1. Act as the technical expert for Splunk solutions.

2. Design and architect Splunk solutions to support large-scale data ingestion, analysis, and visualization.

3. Develop and document architectural designs for scalability, reliability, and performance.

4. Define and enforce best practices for Splunk deployment, configuration, and administration.

Deployment and Integration :

1. Lead the deployment of Splunk infrastructure and applications, including installation, configuration, and integration with data sources.

2. Onboard data, extract fields, and implement data models adhering to the Common Information Model (CIM).

Custom Development :

1. Implement advanced search and reporting capabilities using SPL (Search Processing Language).

2. Develop custom dashboards, alerts, and reports based on business and operational needs.

Performance Optimization :

1. Monitor, troubleshoot, and resolve issues related to Splunk performance, indexing, and data ingestion.

2. Conduct regular health checks and audits to ensure high availability and reliability of the Splunk environment.

Security and Compliance :

1. Implement security best practices, including access control, data protection, and auditing.

2. Collaborate with the security team to ensure compliance with industry standards and regulations.

Mentorship and Collaboration :

1. Provide guidance and mentorship to junior Splunk administrators and developers.

2. Work closely with IT, security, and business teams to understand and address requirements.

Expertise Required :

1. Certifications : Splunk Enterprise Certified Architect/Admin.

2. Proficiency in designing and implementing Splunk solutions in large-scale environments.

3. Experience with data onboarding, field extraction, data models, and CIM (Common Information Model).

4. Expertise in SPL (Search Processing Language) for advanced searches and reporting.

5. Strong knowledge of Splunk Enterprise, Splunk Cloud, and Splunk Enterprise Security (ES).

6. Familiarity with dashboards, alerts, and custom reporting.

Preferred Qualifications :

1. Strong analytical and troubleshooting skills.

2. Excellent communication and collaboration abilities.

3. Experience in monitoring and optimizing Splunk infrastructure for performance.