Splunk Integration & Data Engineers

Visible Stars, Inc.; Riyadh; On-site; SAR 300,000 - 500,000; Full time

Job summary

A technology solutions provider is seeking a Splunk Enterprise Administrator in Riyadh, Saudi Arabia. The ideal candidate will have 3–5 years of expertise in log onboarding and integration. Responsibilities include managing data onboarding, optimizing data models, and ensuring security integrations. Proven experience in handling enterprise Splunk environments and familiarity with compliance in the financial sector are essential. The role demands 24x7 support capabilities, making it suitable for individuals dedicated to technical excellence.

Qualifications

• Proven experience in managing enterprise Splunk environments at scale.
• Certified Splunk engineers across architecture, administration, and use case development.
• Ability to provide at least 5 full-time technical resources.
• 24x7 support with SLA-driven response times.
• Familiarity with regulatory requirements in financial sector (SAMA CSF, PCI DSS).

Responsibilities

• Manage data source onboarding, parsing, and CIM alignment.
• Review and optimize data models and field extractions.
• Ensure integrations with security technologies.
• Manage troubleshooting of ingestion and parsing issues.

Skills

Splunk Enterprise Administration

Log Onboarding

Data Model Optimization

Troubleshooting

Compliance Knowledge

Tools

EDR

IAM

PCI DSS

Job description

Job Description

• Expertise: Splunk Enterprise Certified Admin, 3–5 years in log onboarding and integration.
• Responsibilities:
  • Manage data source onboarding, parsing, and CIM alignment.
  • Review and optimize data models and field extractions.
  • Ensure integrations with security technologies (EDR, IAM, WAF, Firewalls, DLP, etc.).
  • Manage troubleshooting of ingestion and parsing issues.

Qualifications

• Proven experience in managing enterprise Splunk environments at scale (preferably in banking/financial institutions).
• Certified Splunk engineers across architecture, administration, and use case development.
• Ability to provide at least 5 full-time technical resources.
• 24x7 support capabilities with SLA-driven response times.
• Familiarity with regulatory and compliance requirements in the financial sector (SAMA CSF, NCA, PCI DSS, etc.).