Senior Splunk SIEM Architect — Hybrid & SecOps Expert

Avaloq; Philippines; Hybrid; PHP 1,800,000 - 3,500,000; Full time

Job summary

Avaloq is seeking a Senior Splunk Architect to design, implement, and manage the Splunk infrastructure across clusters, optimize deployments, and monitor operations to enable proactive issue resolution. You will integrate data sources, APIs, and cloud facilities to support SecOps.

Ideal candidates have deep SPL expertise, Splunk certification, Linux (RHEL), Kubernetes, and automation tooling (Git, Terraform). Hybrid work options are available.

Qualifications

• Splunk Architect certification or proven Splunk Professional Services experience.
• At least 5 years of experience as Splunk Architect or higher.
• Experience designing and implementing a Security Operations Center with Splunk.
• Strong understanding of SPL and regular expressions.
• Knowledge of automated deployment and version control software (Git, Terraform).
• Knowledge of security components (Firewall, WAF, Vulnerability scanners).
• Familiarity with Cloud Service Providers, preferably Oracle Cloud Infrastructure (OCI).
• Experience with Linux system administration (RHEL) and containerized architectures.

Responsibilities

• Design, implement, and manage the Splunk infrastructure.
• Deploy and manage Splunk indexer and search head clusters.
• Monitor operations and optimize existing deployments.
• Integrate Splunk with legacy data sources, security tools, and cloud facilities.
• Build Splunk Technology Add-ons, apps, and REST API interactions.
• Onboard data sources, create CIM mappings, and establish health KPIs.

Skills

Excellent verbal and written communic

Troubleshooting

Calm under pressure

Team collaboration

Education

Splunk certification

Tools

Splunk

Python

Bash

PowerShell

VBScript

SQL

Git

Terraform

OCI

SOAR

Kubernetes

RHEL

Job description

Avaloq is seeking a Senior Splunk Architect to design, implement, and manage the Splunk infrastructure across clusters, optimize deployments, and monitor operations to enable proactive issue resolution. You will integrate data sources, APIs, and cloud facilities to support SecOps.

Ideal candidates have deep SPL expertise, Splunk certification, Linux (RHEL), Kubernetes, and automation tooling (Git, Terraform). Hybrid work options are available.