Splunk Architect

The Splunk Architect is a key member of the Splunk team, responsible for technical leadership in Splunk delivery projects, with involvement as solution technical architect, key technical subject matter expert, evangelist, and liaison to project, business, and executive stakeholders during all stages of the project/program delivery.

Key responsibilities:

1. Architect, design, and implement scalable Splunk solutions to address complex IT operations challenges.
2. Leverage AIOps capabilities to automate incident management, root cause analysis, and anomaly detection.
3. Integrate Splunk with cloud platforms (AWS, Azure, GCP) and third-party monitoring solutions.
4. Develop and optimize Splunk searches, dashboards, and alerts to provide actionable insights.
5. Utilize Splunk Search Processing Language (SPL) to create advanced queries and automation workflows.
6. Collaborate with cross-functional teams to understand business requirements and translate them into effective Splunk solutions.
7. Stay updated on the latest Splunk features and best practices.

Essential skills/knowledge/experience:

1. Proficiency in designing and implementing Splunk solutions in large-scale environments.
2. Experience with data onboarding, field extraction, data models, and CIM (Common Information Model).
3. Expertise in SPL (Search Processing Language) and developing custom dashboards, alerts, and reports.
4. Strong knowledge of Splunk Enterprise, Splunk Cloud, and Splunk Enterprise Security (ES).
5. Bachelor's degree in computer science, Cybersecurity, or a related field. Master's degree preferred.
6. 8+ years of experience in information security, with a focus on Technical Cyber Security domain.
7. Minimum of 5 years experience in a network/cloud security environment.
8. Certification in one or more cloud vendor offerings such as AWS, GCP, Azure, OCI.