Splunk Architect

Position Type - Full time

Start Date – ASAP

Job Description:

Responsibilities

• • Implementation & Support of new Splunk environment according to high level design created by the customer

• • Understand requirements, be able to convert them into technical implementation

• • Document new development/integration items with detailed technical specifications, as well as testing and validating all development/integration items

• • Mentoring and training operational staff in order to support Splunk services including the creation of operations documentation for maintaining the Splunk infrastructure

• • Setting up Splunk Forwarding for new application tiers introduced into the environment

• • Troubleshooting Splunk performance issues, log feeds, field extractions, spl syntax, etc., as well as identifying bad searches/dashboards and partnering with the creators to improve performance

• • Monitor the Splunk infrastructure for optimization opportunities

• • Work with engineering and operational teams to understand and evaluate existing processes and technical designs, and recommending areas for improvement

• • Apply business and technical analytical skills to analyze, identify, design, implement and develop comprehensive support processes to resolve complex business & operational issues

• • Evaluate, install, and integrate applications from Splunkbase

• • Create custom dashboards, customized for different users, both technical and managerial throughout the enterprise

• • Create customized reports and export results that are flexible and suitable for a variety of purposes

• �. Install ITSI

• �. Install IControl Splunk App (Client Product)

• Basic Qualifications:

• • 3+ years of experience with Splunk configuration / development / implementation architecture, configuration, monitoring, and compliance.

• • Splunk certified Architect certified (ITSI Certification is a Plus)

• • 3+ years' experience with advanced familiarity with most operating system commands/utilities on Windows and/or Linux

• • 2+ years' experience with programming technologies (Python, PowerShell, Ruby)

• • Experience with Splunk Enterprise version 6.x and superior in a distributed environment including design, implementation, and support of Index Clusters, Forwarders, Search-Head Clusters Setup, etc.

• • Experience with Linux and Windows agents for Splunk administration with a solid understanding of the Splunk system

• • Experience in onboarding new data, inputting new information, creating new dashboards, extraction info through splunk

• • Excellent troubleshooting skills

• • Excellent written, verbal and presentation skills, ability to effectively explain complex technical concepts to both technical and non-technical staff

• • Strong attention to detail with excellent organization skills

• Desired Qualifications:

• • Experience implementing/upgrading a distributed Splunk environment

• • Experience managing and maintaining a distributed Splunk environment using configuration and installation automation tools

• • Hands on experience creating roles and playbooks in Ansible

• • Familiarity with metric-based monitoring and integration with event-based monitoring

• • Splunk Admin Certification (Architect is a plus)

• • Familiarity with server-side scripting

• • Has a broad experience from either a development or operations perspective

• • Experience with documentation and change management

• • Experience working with geographically dispersed team members and customers

• • Understanding of various programming languages

• • Good understanding of the ITIL frameworks along with the incident, problem and change management processes and procedures

• • Willingness to take initiative and to overcome obstacles to achieve personal, organizational, and company goals

• • Passion for pushing the limits of back-end technologies and their use in the workplace as a means to accomplish business objectives Division: eTeam Workforce Limited Reference: 19-00562