serve as the L3 SME for Splunk Enterprise/Splunk Cloud, providing advanced troubleshooting, architecture support, and escalation management for complex platform issues.
Design, implement, and manage distributed Splunk environments, including Search Head Clusters, Indexer Clusters, Cluster Masters, Deployment Servers, Heavy Forwarders, and multi-site deployments.
Lead performance tuning, capacity planning, index optimization, storage management, and ingestion architecture for large-scale environments processing multiple TBs of data daily.
Develop complex SPL queries, dashboards, correlation searches, data models, CIM normalization, reports, and enterprise monitoring solutions to support operational and security requirements.
Integrate Splunk with AWS, Azure, GCP, ServiceNow, Kafka, REST APIs, Syslog, CMDB, monitoring tools, and enterprise applications to enable end-to-end observability.
Develop and maintain Python, Shell, and API-based automation frameworks for automated provisioning, health checks, remediation,



alert enrichment, and operational efficiency.
Build and deploy AI/ML solutions using Splunk MLTK, Python, Pandas, NumPy, Scikit-learn, TensorFlow, and Generative AI technologies for anomaly detection, predictive analytics, and intelligent event correlation.
Lead root cause analysis of critical incidents, perform log forensics, predictive monitoring, capacity forecasting, and AIOps implementation to minimize service disruptions.
Implement and govern security controls, RBAC, LDAP/SAML/SSO integration, data retention policies, audit requirements, and Splunk Enterprise Security (ES) best practices.
Mentor L1/L2 teams, drive platform modernization initiatives, create technical standards and documentation, and collaborate with Infrastructure, Security, DevOps, and Application teams to deliver AI-driven observability and automation solutions.

📌 Splunk Administrator - (Bengaluru)
🏢 TRIGENT SOFTWARE PRIVATE
📍 Bengaluru