Splunk Architect - DM/ Manager

Role Overview

This role requires 6 to 10 years of experience focused on managing and administrating SIEM Splunk Enterprise Security systems, Splunk Enterprise, Splunk ITSI, and overseeing migration projects transitioning from Splunk to OpenSearch.

Key Responsibilities

• Manage, support, deploy, and thoroughly document monitoring solutions for enterprise environments.
• Handle Splunk data, including use cases, deployment, reporting, knowledge objects, searching, and optimization.
• Drive migration of Splunk indices and dashboards to OpenSearch/ElasticSearch, maintaining system integrity throughout.
• Administer and develop enterprise-level implementations of Splunk and OpenSearch with clustered architecture.
• Lead end-to-end migration of Splunk Infrastructure from physical to virtual environments.
• Deploy, configure, and manage Splunk Infrastructure components, including Indexers, Forwarders, Search Heads, and clusters.
• Onboard and parse diverse new data sources into Splunk from various platforms such as Linux, Windows, cloud services, and network devices.
• Create and manage Splunk Knowledge Objects such as dashboards, alerts, reports, and saved searches.
• Manage user roles, authentication methods including LDAP and SSO, and access control measures.
• Effectively communicate technical information to stakeholders with both technical and non-technical backgrounds.

Educational Requirements

The candidate must hold a bachelor's degree in information security, computer science, or a related field. A master's degree in business management is preferred.