Splunk Architect

Tekskills; Bulandshahr; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

Tekskills is seeking a Senior Splunk Architect to lead hands-on architecture, design, and deployment of Splunk in Chennai or Hyderabad. The candidate should hold Splunk admin certification and Enterprise Splunk architect certification, with 6-8 years of relevant experience.

This role involves developing Splunk infrastructure, dashboards, alerts, and advanced data parsing to detect anomalies and threats. Responsibilities include monitoring health, optimizing searches, scripting, and integration

Qualifications

• Certified Splunk administrator and Enterprise Splunk architect, as required by the role.
• Hands-on architecture, design and development of Splunk-based solutions in both managed and SaaS environments.
• Strong experience in deploying and maintaining Splunk Universal Forwarder and infrastructure.

Responsibilities

• Architect and implement Splunk infrastructure, dashboards and alerts.
• Monitor Splunk health, optimize data retention and searches, and troubleshoot issues.
• Develop and customize Splunk apps, data models and reports using SPL.
• Work with IT security to detect threats and anomalies using Splunk and SOAR tooling.

Skills

Splunk

Splunk Admin Certification

Enterprise Splunk Architect

Splunk SPL

Job description

Job Title: Splunk Architect
Work Location: CHENNAI, HYDERABAD
Skill Required: Splunk
Experience: 6-8 years

Job Description:

• Should be Splunk admin certified and Enterprise Splunk architect certification.
• Performing hands-on architecture, design, and development of systems in both managed & SaaS environments. Developed Splunk infrastructure and related solutions.
• Standardize and implement Splunk Universal Forwarder deployment, configuration and maintenance in Linux and Windows platforms
• Maintain, Manage and Monitor Splunk Infrastructure (Identify bad searches, dashboards and health of Splunk)
• Used User Behaviour Analytic to parse data into Splunk and detect anomalies in true positive events
• Used SNMP (Simple network management protocol) to monitor the application on the server
• Using Splunk Enterprise to perform data mining and analysis, utilizing various queries and reporting methods
• Analyzing and monitoring security-related technologies including host-based firewalls, host-based using IDS, LDP server configuration controls, logging, SIEM, monitoring tools, antivirus systems.
• Actively hunt for and dissect previously unidentified threats and differentiate between potential intrusion attempts and false alarms
• Monitor and detecting security use cases on Splunk e.g. SQL Injection, SQL Map, Burp-suit intruder
• Using Splunk Phantom Security Orchestration, Automation, and Response (SOAR) system to evaluate notable event for correlation alert
• Develop alerts and timed reports Develop and manage Splunk applications
• Performed Splunk knowledge objects e.g. Configuration, Uploading data, field extraction, validation of boarded data, REGEX search, event parsing, and data transformation
• Use Splunk GUI development creating Splunk apps, searches, Data models, dashboards, and Reports using the Splunk query language.
• Perform index administration, maintenance and optimization and create data retention
• Create Splunk Applications, Splunk Dashboard and Visualizations.
• Expertise in scripting (PowerShell, Python, .net), CI/CD pipelines, Integrations with other tools
• Expertise in Splunk SPL (Search processing Language)
• Manage and troubleshoot Splunk accounts (create, delete, modify, etc.)
• Transfer Splunk log file in Json format to Elastic search
• Support Splunk on UNIX, Linux and Windows-based platforms. Assist with automation of processes and procedures
• Provided different method to install search head, forwarder and deployment servers and troubleshoot at the back end
• Implementing and maintaining Splunk infrastructure and configurations in a single environment and in a clustered environment
• Sound knowledge of Senior Architect role and Agile Methodologies
• Sound Knowledge of Splunk ITSI