KEY SKILLS:

• Splunk as a core SPL (Search Processing Language) and reporting
• Integration with infrastructure and security devices
  Python Scripting for automation and troubleshooting.

KEY REQUIREMENTS:

Education :

• Bachelor’s degree in computer science or related field.
• Certifications (preferred but not explicitly listed):

o Splunk Certified Power User / Admin / Architect

Essential:

• You must be well versed with Splunk SPL, Linux commands and python scripting

o Design, deployment, and maintenance of distributed/clustered Splunk environments
o Management of search heads, indexers, forwarders
o Data ingestion: configuring inputs, indexes, source types
o Content creation: dashboards, reports, alerts
o Access control: user roles, authentication
o Application management: installing/upgrading custom and Splunk base apps
o Scripting & Troubleshooting
o Linux command-line skills
o Python scripting for automation and troubleshooting
o Log analysis and issue reproduction

o Bug reporting and vendor escalation

• You must be the experienced developer, with good experience in system integration/interfacing.
• Depending on the project, your duties may include coding, scripting, building new systems (where necessary) and interfaces. For new system build-up, you may need to environment support during SIT/UAT.
• You are expected to ensure your work are adequately documented and transferred to the production team post-cutover.
• You will be expected to work with the senior developers and system architect in formulating technical solutions that is fit for purpose for your assigned projects. The solution will need to satisfy all security, regulatory and architectural standards.

• Design, plan, installation, maintenance, configuration of Splunk distributed/cluster deployment, and integration with infrastructure tools, security devices and application software.
• Drive collaboration with peers to manage efforts with our Splunk solutions.
• Manage and maintain all Splunk components (search heads, indexers, forwarders)
• Manage data ingestion from different sources (data inputs, indexes, source types)
• Create Splunk contents (dashboard, reports, alerts, etc) for new use cases
• Manage Splunk access and permissions (users, roles, authentications)
• Fine tuning of existing searches for better performance
• Upgrade and installation of Splunk application (custom apps, Splunk-base apps)
• View Splunk logs for troubleshooting – must be well versed with Splunk SPL, Linux commands and python scripting.
• Troubleshoot technical issues to establish the root cause of problems and form a solution or workaround across a range of environments.
  Reproduce issues and if necessary, file bug reports, escalate cases to vendor, and provide necessary documentation