We are seeking a skilled Splunk Integration Engineer to design, implement, and maintain Splunk integrations across enterprise systems. The ideal candidate will have hands-on experience with Splunk Enterprise, log onboarding, data ingestion, dashboard development, and SIEM use cases. This role involves collaborating with infrastructure, security, application, and DevOps teams to ensure reliable monitoring, analytics, and security visibility.

Key Responsibilities
Design, implement, and maintain Splunk integrations with enterprise applications, cloud platforms, network devices, and security tools.
Configure and manage data inputs, forwarders, indexers, search heads, and deployment servers.
Develop and optimize Splunk dashboards, reports, alerts, and correlation searches.
Integrate Splunk with third-party tools using REST APIs, webhooks, and custom scripts.
Troubleshoot data ingestion, parsing, indexing, and search performance issues.
Develop and maintain custom Splunk apps, add-ons, and knowledge objects.
Work with security teams to implement SIEM use cases, threat detection, and compliance reporting.
Monitor Splunk platform health and optimize system performance and scalability.
Automate Splunk administration tasks using Python, Shell scripting,



or PowerShell.
Document configurations, integration processes, and operational procedures.
Support production settings and participate in incident resolution.

Required Skills
58 years of experience with Splunk Enterprise and Splunk ES.
Robust understanding of Splunk architecture, indexing, search processing, and distributed deployments.
Experience configuring Universal Forwarders, Heavy Forwarders, and deployment servers.
Hands-on experience with log onboarding from Windows, Linux, cloud platforms, databases, and network devices.
Proficiency in Splunk Search Processing Language (SPL).
Experience with REST APIs and integration development.
Knowledge of Python, Shell scripting, or PowerShell.
Familiarity with Linux and Windows administration.
Experience with JSON, XML, Syslog, and log parsing techniques.
Understanding of networking concepts (TCP/IP, DNS, HTTP/HTTPS, SSL/TLS).
Knowledge of SIEM concepts, cybersecurity frameworks, and incident monitoring.
Experience integrating cloud platforms such as AWS, Azure, or Google Cloud.
Familiarity with CI/CD pipelines and DevOps tools is an advantage.

📌 Splunk Integration Engineer Chennai (India)
🏢 Orcapod Consulting Services
📍 India