Position Overview:

As a Splunk Admin, your primary responsibility will be to oversee the management, configuration, and maintenance of the Splunk platform. You will work closely with cross-functional teams to ensure the effective operation and utilization of Splunk for monitoring, troubleshooting, and data analysis purposes.

Key Responsibilities:

- Install, configure, and deploy Splunk Enterprise and its components across various environments (development, testing, production). Ensure proper configuration of data inputs, indexes, and data forwarding.
- Perform installation, configuration management, license management, data integration, data transformation, field extraction, event parsing, data preview, and Apps management of Splunk platform.
- Support, and maintain Splunk infrastructure for a highly available and disaster recovery configurations.
- Standardize Splunk agent deployment, configuration, and maintenance across a variety of Windows and Linux log platforms.
- Implement and administer Splunk IT Service Intelligence (ITSI) for a large-scale data ingestion environment.
- Proficiency in creating services, entities, KPIs, glass tables, notable events, and correlation searches in Splunk ITSI
- Create and manage user accounts, roles, and permissions within Splunk. Maintain a secure environment by implementing authentication and authorization mechanisms.
- Monitor the health and performance of Splunk infrastructure components, including indexing, search heads, and forwarders. Perform routine maintenance tasks such as log rotation, backup and recovery, and software updates.
- Investigate and resolve issues related to data ingestion, search queries, dashboards, and alerts. Collaborate with cross-functional teams to troubleshoot complex issues and provide timely resolutions.
- Develop complex Splunk search queries for the reports, alerts and dashboards that have high visibility in the organization.
- Identify and implement performance tuning techniques to optimize search performance, reduce storage requirements, and improve overall system efficiency. Monitor resource utilization and capacity planning to ensure scalability.
- Knowledge on various Splunk apps and add-ons
- Experience on integrating Splunk with other monitoring or ITSM tools.
- Experience in Regular expressions
- Experience in Scripting - Shell or Python scripting
- Maintain accurate documentation of configurations, procedures, and troubleshooting steps. Provide training and knowledge transfer to users and other team members on Splunk best practices and usage guidelines.

Qualifications:

- Bachelor's degree in computer science, information technology, or a related field.
- Strong experience in Splunk administration, including installation, configuration, and maintenance.
- Proficiency in Linux/Unix operating systems and scripting languages (e.g., Bash, Python).
- Solid understanding of networking concepts, protocols, and security principles.
- Familiarity with log management, log analysis concepts.
- Excellent troubleshooting and problem-solving skills.
- Splunk Core Certified Power User, Splunk Core Certified Admin is a Plus
- Strong communication and collaboration skills to work effectively with cross-functional teams.

Splunk Developer:

Position Overview:

As a Splunk Developer, you will be responsible for designing, developing, and implementing custom solutions within the Splunk platform. You will collaborate with stakeholders to gather requirements, develop data models, and create dashboards, reports, and alerts to meet the organization's operational and analytical needs.

Key Responsibilities:





- Collaborate with stakeholders to understand business requirements and design Splunk solutions accordingly. Develop custom data models, search queries, and dashboards to extract meaningful insights from data.
- Implement data ingestion strategies to collect and process logs, metrics, and other relevant data sources. Develop custom data inputs, data parsers, and field extractions to normalize and enrich data.
- Create visually appealing and interactive dashboards and reports using Splunk's visualization tools. Design intuitive user interfaces to enable effective data exploration and analysis.
- Develop and configure real-time alerting mechanisms based on predefined thresholds and anomaly detection techniques. Monitor data inputs, system health, and critical events to ensure timely notifications.
- Optimize search queries, data models, and dashboards for improved performance and efficiency. Identify and implement best practices to minimize resource utilization and maximize scalability.
- Collaborate with cross-functional teams, including administrators, data engineers, and security analysts, to address their specific data needs. Provide support and troubleshooting assistance for Splunk-related issues.
- Document design specifications, data models, and development processes. Provide training.
- Experience working in Classic and dashboard studio.
- The ability to design Splunk reports and dashboards using complex data elements.
- A passion for Analytics, for helping users discover and share the stories and meaning in their data.
- Experience in translating business requirements into concrete data analytic solutions
- Familiarity & previous use of JavaScript within Splunk (Specifically the understanding of the SplunkJS module) and CSS
- Experience developing and interfacing with REST APIs
- Good knowledge of engineering, configuring, deploying, and supporting Splunk Enterprise, Splunk Cloud, ITSI and Observability
- Requirements:

- Bachelor's degree in computer science, Information Systems, or a related field.
- Strong experience in Splunk development (Apps, knowledge Objects creation)
- Proficiency in developing complex Splunk searches, reports, dashboards, and alerts using Splunk SPL (Search Processing Language).
- Knowledge of data integration techniques and technologies, such as RESTful APIs, databases, and streaming data.
- Familiarity with scripting languages like Python or PowerShell for automation and data manipulation tasks.
- Strong communication and interpersonal skills to collaborate with stakeholders and cross-functional teams.
- Splunk certifications (Splunk Certified Developer, Splunk Certified Admin) are desirable.
- Strong communication and collaboration skills to work effectively with cross-functional teams.

Splunk Architect:

Position Overview:

As a Splunk Architect, you will play a crucial role in designing, implementing, and maintaining enterprise-level Splunk deployments. Your expertise in Splunk technologies and best practices will drive the development of scalable and high-performing solutions that meet the organization's operational and analytical needs.

Key Responsibilities:





- Design and architect end-to-end Splunk solutions based on business requirements, ensuring scalability, performance, and reliability. Define system components, data flows, and integration points with other systems.
- Develop deployment strategies and guidelines for Splunk installations across multiple environments (development, testing, production). Configure and optimize Splunk infrastructure components such as indexers, search heads, and forwarders.
- Design and implement data ingestion strategies to onboard logs, metrics, and other relevant data sources into Splunk. Define data parsing and transformation rules, field extractions, and normalization techniques.
- Develop and maintain data models that provide a structured and efficient representation of data for analysis and reporting purposes. Define data relationships, hierarchies, and tags to enable effective data exploration.
- Identify performance bottlenecks and develop strategies to optimize search performance, reduce storage requirements, and improve system scalability. Conduct capacity planning to ensure adequate resources are available.
- Implement security controls and best practices to protect sensitive data within the Splunk environment. Ensure compliance with regulatory requirements and industry standards for data privacy and protection.
- Integrate Splunk with other systems and tools to enable seamless data exchange and workflow automation. Develop custom connectors, APIs, and scripts to enhance Splunk's functionality and integration capabilities.
- Document architectural designs, deployment configurations, and best practices. Provide training and knowledge transfer to administrators, developers, and end users on Splunk architecture and usage.
- Stay updated with the latest Splunk features, technologies, and industry trends. Evaluate and recommend new tools, techniques, and approaches to enhance the Splunk ecosystem and drive continuous improvement.
- Experience implementing Splunk Enterprise, Splunk Cloud, ITSI and Observability solutions.
- Proficiency in creating services, entities, KPIs, glass tables, notable events, and correlation searches in Splunk ITSI.
- Develop and implement correlation searches, anomaly detection algorithms, and predictive analytics.
- Experience working in Splunk Infrastructure monitoring, application monitoring and digital experience monitoring observability products.
- Experience in Splunk On-call and log observer
- Ability to onboard and manage Open telemetry data in Splunk.
- Qualifications:

- Bachelor's or master's degree in computer science, information technology, or a related field.
- Extensive experience in designing and architecting Splunk solutions in large-scale environments.
- Strong knowledge of Splunk Enterprise, Splunk Cloud, and associated technologies (Universal Forwarder, Indexer, Search Head, etc.).
- Proficiency in scripting languages (e.g., Python, Bash) and experience with RESTful APIs for automation and integration purposes.
- In-depth understanding of data onboarding techniques, data modeling, and advanced search techniques in Splunk.
- Strong knowledge of networking concepts, security principles, and system performance optimization.
- Experience with distributed systems, high availability architectures, and disaster recovery planning.
- Excellent problem-solving and analytical skills with the ability to troubleshoot complex issues.
- Strong communication and interpersonal skills to collaborate effectively with stakeholders at all levels of the organization.
- Splunk Certified Enterprise or Cloud Architect certification is an added advantage.

📌 Splunk (Bengaluru)
🏢 TRIGENT SOFTWARE PRIVATE
📍 Bengaluru