Splunk Administrator

This is a remote position.

Our client, a leading global IT service provider, is recruiting Splunk Administrator to join their business in Germany / Spain.

Responsibilities:

• Worked on Setup Indexer, Search Head, Deployment Server, Heavy Forwarder and Universal forwarder.
  

• Standardized Splunk Forwarder Deployments, configurations and maintenance across a variety of UNIX and Windows platforms.
  

• Troubleshoot Splunk server and Forwarder problems and issues.
  

• Design and maintain production-quality Dashboards.
  

• Expertise in Parsing, Indexing, Searching concepts Hot, Warm, Cold, Frozen bucketing.
  

• Expertise in using the commands like regex, to extract the fields from log files.
  

• Expertise in Actuate Reporting, Development, Deployment, Management and Performance
  

• Monitor the Splunk infrastructure for capacity planning and optimization & Support Splunk on
  

• Linux and Windows-based platforms. Etc.
  

Tasks:

• Establish and maintain configuration and technical support, assist in the technical design process, and provide guidance/direction to customer on how to best get value from Splunk products.
  

• Maintain, upgrade and troubleshoot SPLUNK servers, clusters and management systems.
  

• Install, upgrade and maintain required SPLUNK applications and add-ons.
  

• Provide performance and license tuning for systems and troubleshoot SPLUNK components across multiple network environments.
  

• Provide solution engineering support to ensure systems and components meet current and future standards.
  

• Develop, create, deploy, and manage custom SPLUNK monitors, alerts and dashboards.
  

• Monitor SPLUNK for cluster status, health status, and other issues, and resolve as needed.
  

• Manage patching and updates of Splunk hosts and/or Splunk application software.
  

• Monitor and audit configurations and participate in the Change Management process to ensure that unauthorized changes do not occur.   
  

• Perform data ingestion and visualization for Splunk.
  

• Build and integrate contextual data into notable events.
  

• Build dashboards highlighting data anomalies and key trends. Design, develop, recommend, and implement Splunk dashboards and alerts in support of the Incident Response team.
  

• Develop advanced scripts for the manipulation of data to support analyst requirements.
  

• Provide recommendations and implement changes to optimize Splunk in the environment.
  

• Manage automating Splunk deployments and orchestration.
  

Qualifications:

• Bachelor’s degree and 8+years of relevant experience.
  

• At least five (5) years of experience with Splunk implementing and administering Splunk and Splunk Enterprise Security.
  

• Experience developing in Bash, Perl, Shell, Powershell, SQL, D3, HTML, XML, CSS, Bash, JAVA and/or Python scripts.
  

• Experience writing Splunk queries in Splunk Programming Language (SPL).
  

• Analytical ability, problem-solving skills, and ability to break down complex problems into actionable steps.
  

• Experience must include a wide range of work in creating diagrams and documentation with all components that comprise IT systems including network topology.
  

• Experience selecting effective methods, techniques, and evaluation criteria to achieve desired outcomes.
  

If you know of anyone within your network who may also be interested in this position, would you please forward this ‘Email & Role’ to them.