Senior Splunk Architect | SIEM & SecOps (Hybrid)

Avaloq; Makati; Hybrid; PHP 900,000 - 1,500,000; Full time

Job summary

Avaloq is seeking a seasoned Splunk Architect to design, deploy, and optimize Splunk environments across clusters, ensuring proactive monitoring and data integration from diverse sources. The role supports security operations and requires deep SPL expertise and familiarity with cloud and automation tools.

Ideal candidates will have strong communication skills, a track record in enterprise security infrastructure, and the ability to work in a hybrid setup within a global technology-driven company.

Qualifications

• Splunk Architect or Splunk Consultant certification or proven Splunk Professional Services experience.
• At least 5 years of general work experience as Splunk Architect or higher.
• Experience in designing and implementing Security Operation Center with Splunk.
• Strong understanding of all Splunk architecture components (search head clustering, indexer clustering, deployment server, monitoring console).
• Strong understanding of SPL and regular expressions.
• Knowledge of automated deployment and version control software (Git, Terraform).
• Knowledge of security components (Firewall, WAF, vulnerability scanners).
• Knowledge of Cloud Service Providers, preferably OCI.
• Knowledge of SOAR is highly desirable.
• Linux system administration skills (RHEL).
• Knowledge of Kubernetes and containerized architectures.
• Understanding of network protocols/services and infrastructure.
• Ability to troubleshoot and work under pressure.

Responsibilities

• Design, implement, and manage the Splunk infrastructure.
• Deploy and manage Splunk indexer and search head clusters.
• Optimize existing clustered Splunk deployments.
• Monitor Splunk operations for proactive issue identification and resolution.
• Onboard data sources; create CIM mappings and data models; establish health KPIs.
• Manage Splunk Apps, Dashboards, Saved Searches, and RBAC.

Skills

Splunk architecture

SPL

Regex

Linux

Kubernetes

REST API

Python

SQL

Cloud OCI

SOAR

Terraform

Git

Tools

Git

Terraform

OCI

Job description

Avaloq is seeking a seasoned Splunk Architect to design, deploy, and optimize Splunk environments across clusters, ensuring proactive monitoring and data integration from diverse sources. The role supports security operations and requires deep SPL expertise and familiarity with cloud and automation tools.

Ideal candidates will have strong communication skills, a track record in enterprise security infrastructure, and the ability to work in a hybrid setup within a global technology-driven company.