Splunk Administrator

mthree Recruiting Portal; Canada; On-site; CAD 80,000 - 100,000; Full time

Job summary

A leading international investment bank in Montreal is seeking a Splunk Administrator / Security Infrastructure Engineer. This role requires expertise in infrastructure automation and strong analytical skills to support the security analytics platform. Ideal candidates have a degree in computer science and 3+ years in the field. Responsibilities include onboarding datasources and developing automation tools. This challenging position offers opportunities for growth within a supportive team.

Qualifications

• 3+ years in relevant industry experience.
• Strong understanding of operating systems and networking concepts.
• Good understanding of software version control and deployment tools.

Responsibilities

• Onboard new datasources with appropriate field extractions.
• Develop automation tools for configuration management frameworks.
• Provide consultancy to internal clients and stakeholders.

Skills

Infrastructure automation and integration

Python

Ansible

Linux/Unix system administration

Analytical and troubleshooting skills

Agile methodologies

Education

Degree or college diploma in computer science or related field

Tools

Git

Jenkins

Jira

Job description

Splunk Administrator / Security Infrastructure Engineer

A great opportunity for a Splunk Administrator / Security Infrastructure Engineer to be a part of leading, international investment bank in Montreal. This role is ideal for a keen technologist, who has a proactive attitude and desire to learn & work with new technologies across security infrastructure.

Their globally distributed squad is responsible for delivering a security analytics platform using the Splunk product. Their key stakeholders are cyber teams including security response, investigations, and insider threat. They are seeking a security infrastructure engineering specialist to help maintain the platform. This is challenging role with a steep learning curve which, with the help of a friendly and supportive squad, will transform your technical skills.

Responsibilities:

• A successful applicant will contribute to a number of important initiatives including:
• Onboarding new datasources with appropriate field extractions
• Developing automation tools that integrate with in-house developed configuration management frameworks and APIs
• Providing consultancy to internal clients and stakeholders
• Identifying and implementing tuning to improve performance
• Working as a top-level escalation point to perform complex troubleshoots, working with other infrastructure teams to resolve issues

Required Skills:

• Degree or college diploma in relevant subject such as computer science, programming, or cyber security
• 3+ years in relevant industry experience
• Infrastructure automation and integration experience, ideally using Python and Ansible
• A solid understanding of O/S and networking concepts: Linux/Unix system administration, HTTP and encryption
• Good understanding of software version control, deployment & build tools using DevOps SDLC practices (Git, Jenkins, Jira)
• Understanding/appreciation across infrastructure technologies such as loadbalancers, firewalls, TCP/ICP and webservers.
• Strong analytical and troubleshooting skills
• Appreciation of Agile methodologies, specifically Kanban

Desired Skills:

• Prior experience deploying and managing large-scale data analytics platforms
• Data engineering and configuration experience inc. writing and testing field extractions using regular expressions
• Log data transport technologies such as Kafka and syslog
• Splunk certified administrator and/or architect
• Experience using the Elastic Stack