Splunk Architect

Tekskills; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Tekskills in India seeks a Splunk Architect to lead design and implementation of Splunk infrastructure and security use cases across both managed and SaaS environments.

The role requires strong Splunk expertise, certifications, and scripting skills in Python/PowerShell/.NET, with hands-on experience on Linux and Windows platforms.

Qualifications

• Splunk admin certified and Enterprise Splunk architect certification is required.
• Hands-on architecture, design and development of systems in managed or SaaS environments.
• Experience with deploying Splunk Universal Forwarder on Linux and Windows.
• Maintaining and monitoring Splunk infrastructure, dashboards and health.

Responsibilities

• Design and implement Splunk architecture for on-prem and SaaS deployments.
• Develop and manage Splunk apps, dashboards, and data models.
• Create alerts, reports, and data transformations using Splunk SPL.
• Monitor security use cases and SIEM-related activities within Splunk.

Skills

Splunk

Tools

PowerShell

Python

-.NET

Job description

Job Title: Splunk Architect
Work Location: CHENNAI, HYDERABAD
Skill Required: Splunk
Experience: 6-8 years

Job Description:

• Should be Splunk admin certified and Enterprise Splunk architect certification.
• Performing hands-on architecture, design, and development of systems in both managed & SaaS environments. Developed Splunk infrastructure and related solutions.
• Standardize and implement Splunk Universal Forwarder deployment, configuration and maintenance in Linux and Windows platforms
• Maintain, Manage and Monitor Splunk Infrastructure (Identify bad searches, dashboards and health of Splunk)
• Used User Behaviour Analytic to parse data into Splunk and detect anomalies in true positive events
• Used SNMP (Simple network management protocol) to monitor the application on the server
• Using Splunk Enterprise to perform data mining and analysis, utilizing various queries and reporting methods
• Analyzing and monitoring security-related technologies including host-based firewalls, host-based using IDS, LDP server configuration controls, logging, SIEM, monitoring tools, antivirus systems.
• Actively hunt for and dissect previously unidentified threats and differentiate between potential intrusion attempts and false alarms
• Monitor and detecting security use cases on Splunk e.g. SQL Injection, SQL Map, Burp-suit intruder
• Using Splunk Phantom Security Orchestration, Automation, and Response (SOAR) system to evaluate notable event for correlation alert
• Develop alerts and timed reports Develop and manage Splunk applications
• Performed Splunk knowledge objects e.g. Configuration, Uploading data, field extraction, validation of boarded data, REGEX search, event parsing, and data transformation
• Use Splunk GUI development creating Splunk apps, searches, Data models, dashboards, and Reports using the Splunk query language.
• Perform index administration, maintenance and optimization and create data retention
• Create Splunk Applications, Splunk Dashboard and Visualizations.
• Expertise in scripting (PowerShell, Python, .net), CI/CD pipelines, Integrations with other tools
• Expertise in Splunk SPL (Search processing Language)
• Manage and troubleshoot Splunk accounts (create, delete, modify, etc.)
• Transfer Splunk log file in Json format to Elastic search
• Support Splunk on UNIX, Linux and Windows-based platforms. Assist with automation of processes and procedures
• Provided different method to install search head, forwarder and deployment servers and troubleshoot at the back end
• Implementing and maintaining Splunk infrastructure and configurations in a single environment and in a clustered environment
• Sound knowledge of Senior Architect role and Agile Methodologies
• Sound Knowledge of Splunk ITSI