Splunk Technical Architect / SME

Duration : 4-6 months

Profile :

1. Act as Technical/Solution Expert for Splunk
2. Design and architect Splunk solutions to support large-scale data ingestion, analysis, and visualization.
3. Develop and document architectural designs, ensuring scalability, reliability, and performance.
4. Define best practices for Splunk deployment, configuration, and administration.
5. Lead the deployment of Splunk infrastructure and applications, including installation, configuration, and integration with various data sources.
6. Implement advanced search and reporting capabilities using SPL (Search Processing Language).
7. Develop custom dashboards, alerts, and reports to meet business and operational requirements.
8. Monitor and optimize Splunk infrastructure to ensure high availability and performance.
9. Perform regular health checks and audits of the Splunk environment.
10. Troubleshoot and resolve issues related to Splunk performance, indexing, and data ingestion.
11. Implement security best practices for Splunk, including data protection, access control, and auditing.
12. Collaborate with the security team to ensure compliance with industry standards and regulations.
13. Provide guidance and mentorship to junior Splunk administrators and developers.
14. Work closely with IT, security, and business teams to understand requirements and provide Splunk solutions.

Expertise:

1. Splunk Enterprise Certified Architect/Admin
2. Proficiency in designing and implementing Splunk solutions in large-scale environments.
3. Experience with data onboarding, field extraction, data models, and CIM (Common Information Model).
4. Expertise in SPL (Search Processing Language) and developing custom dashboards, alerts, and reports.
5. Strong knowledge of Splunk Enterprise, Splunk Cloud, and Splunk Enterprise Security (ES).