Role & responsibilities

- Overall experience 6-10 years. SIEM Splunk Enterprise Security administrator Splunk Enterprise, Splunk Enterprise Security and Splunk ITSI.

- Experience in managing, supporting, deploying and documenting monitoring solutions

- Experience with Splunk data, use case, deployment, Splunk reporting, Splunk knowledge objects, Splunk searching & optimization . Knowledge of OpenSearch and migration from Splunk to OpenSearch

- Excellent communication and analytical skills with ability to present technical details to the stakeholders in technical and non-technical backgrounds.

- Very positive experience in migration of Splunk indices and dashboards to OpenSearch/ElasticSearch.

- Experience administering and/or developing for an enterprise level implementation of Splunk and OpenSearch (clustered architecture).

- Education:



Bachelors degree in information security, Computer Science, or a related field. A masters in business management is preferred.

Preferred candidate profile

- Resource will be responsible for End2End Splunk Infrastructure Migration from Physical to Virtual.

- Deploy, Configure, &
- Manage Splunk Infrastructure (Indexers, Forwarders, Search Heads, Clustering etc.).

- Onboard &

- Parse New Data Sources into Splunk from Various Platforms (Linux, Windows, Cloud Services, Network Devices, etc.).

- Create &

- Manage Splunk Knowledge Objects: Dashboards, Alerts, Reports, Saved Searches.

- Manage User Roles, Authentication (e.g., LDAP, SSO), &

- Access Control.

📌 Splunk Architect - DM/ Manager | Pune
🏢 Deloitte Shared Services India
📍 Pune