Splunk Engineer ( WFO / Must Cloud & Cybersecurity / Enterprise Level)

Exp.-

• Deployment and configuration of Splunk platform (Enterprise) / Splunk Cloud
• Demonstrate Splunk Core capabilities to the prospective clients
• Optimizes Splunk platform architecture for large-scale and distributed deployments
• Adopt best practices and development standards, and deployment of the same
• Develops and customizes Splunk apps and dashboards and Builds advanced visualizations
• Administering Production Systems, where Splunk platform is with multiple data sources as Metrics, Windows sources, HEC, ,etc.
• Migration / upgrade execution for Splunk platform
• Should perform in-depth diagnostic of incidents on any specific application and identify the root cause of problems
• Should document resolved issues in an effective manner for knowledge management, cross-train peers with tool usage and assist in creation of best-practices, work independently on multiple assignments, proactively prioritizing focus and effort
• Should have good hands on knowledge of Deployment , Administration and Development of the Splunk Enterprise platform
• Implements and maintains Splunk platform infrastructure and configuration
• Undertakes day-to-day operational and user support & Executes new projects as well as data and user onboarding
• Experience in integrating other tools like JIRA, ServiceNow, Jenkins, AWS etc. with Splunk using 3rd party app
• Proficient in writing SPL queries and experience in advanced level dashboarding, scheduled jobs, Data models, Lookups and other knowledge objects
• Experience in performance optimization of existing dashboards, reports and alerts
• Experience in MLTK, DB Connect Apps and experience in any one of the scripting tools (Python / Shell)
• Experience in at least one Premium App like ITSI, ES, Phantom, UBA, Splunk Observability
• Experience in scripting, Ansible / Puppet for Run book Automation
• Fair understanding of AWS cloud and cloud services
• Splunk certified Professional