Senior Splunk Architect - Hybrid Security Ops

Avaloq Philippines Inc.; Philippines; Hybrid; PHP 1,400,000 - 2,800,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Avaloq Philippines Inc. is seeking a seasoned Splunk Architect to design, implement, and manage our Splunk infrastructure across on-prem and cloud integrations.

You will deploy indexer and search head clusters, optimize existing deployments, monitor operations, and onboard data sources while collaborating with SecOps and engineering teams. The role requires deep SPL, scripting, and automation expertise, with strong knowledge of Linux/Windows, cloud providers (OCI preferred), and containerized

Qualifications

• Splunk Architect or Splunk Consultant certification or proven Splunk Professional Services experience.
• At least 5 years of general work experience as Splunk Architect or higher.
• Experience in designing and implementing Security Operation Center with Splunk.
• Strong understanding of all Splunk architecture components to include search head clustering, indexer clustering, deployment server and monitoring console.
• Strong understanding of SPL.
• Strong understanding of regular expressions and data pipelines.
• Knowledge of platform and application automated deployment and version control software e.g. (Git, Terraform) within a physical environment.
• Knowledge of Security components (Firewall, WAF, Vulnerability scanners, etc…).
• Knowledge of Cloud Service Providers, preferably OCI.
• Knowledge of SOAR is highly desirable.
• Linux system administration skills, preferably RHEL.
• Windows system administration skills.
• Knowledge of Kubernetes and containerized architectures.
• Understanding of network protocols/services and network infrastructures.
• Ability to troubleshoot, diagnose and solve issues independently.
• Excellent verbal and written communication skills.
• Experience as part of a team supporting and maintaining an infrastructure.
• Calm and logical approach during a critical event.

Responsibilities

• Design, implement, and manage the Splunk infrastructure.
• Deploy and manage Splunk indexer clusters and search head clusters.
• Performing optimization of existing clustered Splunk deployments.
• Monitor operations of Splunk platform to enable proactive issue identification, response, and resolution.
• Interact with REST API endpoints.
• Interact with RBDMS in SQL.
• Onboard Threat Intelligence feeds and correlate with data.
• Assist Security Analysts providing them consultancy to leverage the Splunk environment.
• Drive the operational model transformation of SecOps.

Skills

Splunk architecture

Security operations

SPL

Python

Bash

PowerShell

Git

Terraform

REST API

SQL

OCI

Kubernetes

Linux

Windows

Tools

Git

Terraform

REST API

SQL

Job description

Avaloq Philippines Inc. is seeking a seasoned Splunk Architect to design, implement, and manage our Splunk infrastructure across on-prem and cloud integrations.

You will deploy indexer and search head clusters, optimize existing deployments, monitor operations, and onboard data sources while collaborating with SecOps and engineering teams. The role requires deep SPL, scripting, and automation expertise, with strong knowledge of Linux/Windows, cloud providers (OCI preferred), and containerized