Senior Splunk Consultant & Engineer | Riyadh, Saudi Arabia

DWT Technology; Riyadh; On-site; SAR 300,000 - 460,000; Full time

Benefits offered by this job

On-site in Riyadh

12-Month Contract

Career growth opportunities

Job summary

DWT Technology in Riyadh, Saudi Arabia seeks a Senior Splunk Consultant and Engineer for an urgent 12-month on-site project. You will lead Splunk design, heavy forwarder maintenance, indexer and search head clusters, and dashboard development to deliver real-time visibility and threat detection.

The ideal candidate has 7+ years of hands-on Splunk experience, strong knowledge of data ingestion, SPL, and collaboration with SOC and IT teams.

Qualifications

• Bachelor’s degree in Computer Science or related field.
• 7+ years in architecting and administering Splunk environments.
• Hands-on experience with heavy forwarders and indexer/search head clusters.
• Proficient in SPL, dashboards, alerts, and reports.
• Experience with data ingestion pipelines and log parsing.

Responsibilities

• Architect, deploy, and maintain enterprise Splunk environments across multi-site infra.
• Design advanced dashboards, saved searches, alerts, and reports.
• Manage data ingestion configurations including Universal/Heavy Forwarders and clusters.
• Tune SPL queries for optimal performance and scalability.
• Collaborate with SOC, IT operations, and client stakeholders.
• Ensure data governance, retention, and security compliance.
• Maintain thorough documentation and runbooks.

Skills

Splunk Enterprise

Splunk Architecture

SPL Queries

Data Ingestion

Linux/Windows Admin

SOC Collaboration

Education

Bachelor's degree

Tools

Jira

Confluence

Job description

Position Summary:

Driving advanced security information and event management (SIEM), enterprise log analytics, and mission-critical Splunk architecture in Riyadh, Saudi Arabia, DWT Technology is actively seeking an accomplished Senior Splunk Consultant and Engineer for an urgent 12-month on-site project engagement. In this vital technical leadership role, you will take full operational, architectural, and tactical ownership of Splunk enterprise environments, data ingestion pipelines, cluster scaling, and advanced dashboard creation. Bringing 7+ years of progressive professional experience in Splunk enterprise administration and architecture, you will empower major enterprises in the Middle East to achieve uncompromised operational visibility, real-time threat detection, and robust data management resilience. This prestigious career opportunity offers top-tier remuneration, high professional visibility, and career growth within a premier international recruitment and IT consulting enterprise.

Detailed Job Description:

As a Senior Splunk Consultant supporting DWT Technology on an on-site basis in Riyadh, KSA for a 12-month contract duration, you will take full operational, tactical, and technical ownership of enterprise Splunk design, heavy forwarder maintenance, indexer and search head cluster management, and custom knowledge object configuration. Your day-to-day responsibilities include architecting scalable log ingestion workflows, building advanced dashboards, saved searches, alerts, and reports, tuning SPL queries for maximum performance, collaborating with enterprise cybersecurity and IT operations squads, and interacting directly with technical recruitment consultants like Salim S.

Key Responsibilities:

• Architect, design, deploy, configure, and maintain enterprise Splunk environments across complex multi-site infrastructure.
• Create and optimize advanced Splunk dashboards, saved searches, real-time alerts, operational reports, and custom knowledge objects.
• Design and manage robust data ingestion configurations, Universal Forwarders, Heavy Forwarders, indexer clusters, and search head clusters.
• Troubleshoot complex data pipeline bottlenecks, parsing errors, license capacity limits, and search performance latency.
• Author highly efficient Search Processing Language (SPL) queries, macros, event types, and automated alert actions.
• Collaborate seamlessly with enterprise security operations centers (SOC), system administrators, and client technical stakeholders.
• Ensure strict adherence to data governance policies, log retention schedules, and enterprise security compliance standards.
• Maintain meticulous technical documentation, cluster topology diagrams, ingestion runbooks, and configuration backup repositories.

Required Qualifications & Skills:

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related technical discipline.
• Minimum of 7+ years of progressive professional hands-on experience in architecting, deploying, and configuring Splunk enterprise environments.
• Strong, demonstrable operational expertise in heavy forwarders, indexer clusters, and search head cluster architectures.
• Comprehensive working knowledge and practical proficiency in advanced SPL querying, dashboard creation, and alert management.
• Deep practical experience in data ingestion configurations, Universal Forwarder deployment, and log parsing rule development.
• Solid practical grasp of enterprise IT infrastructure, operating system administration (Linux/Windows), and networking fundamentals.
• Exceptional analytical problem-solving aptitude, system troubleshooting capabilities, and professional client communication skills.
• Mandatory current physical residency in Saudi Arabia with a valid, transferable Iqama and immediate availability for on-site deployment.

Nice-to-Have Skills:

• Official professional certifications such as Splunk Enterprise Certified Admin or Splunk Enterprise Certified Architect.
• Additional certifications including CISSP, CompTIA Security+, or Certified Information Systems Auditor (CISA).
• Prior professional working experience in top-tier multinational banking institutions, government entities, or telecommunications operators in the Middle East.
• Experience utilizing enterprise agile tracking platforms (Jira, Confluence) for project task coordination.
• Active participation in Splunk user groups, security communities, or technical advisory forums.

Application Information:

• Recruiter: DWT Technology Recruitment Division
• Contact Name: Salim S. (Technical Recruitment Consultant)
• Email: [e-mail]
• Phone:
• Company Website: https://www.dwttechnology.com
• Salary/Rate: Market Competitive / Enterprise 12-Month Contract Package
• Deadline: Open until filled (Urgent Riyadh Senior Splunk Consultant Opening – Immediate Joiners Only)
• Notice Period: Immediate Availability Required (Transferable Iqama Mandatory)
• Contract Duration: 12 Months Contract / Full-Time On-Site Engagement (Riyadh, Saudi Arabia)