We are looking for an experienced Splunk SME with strong expertise in Splunk administration, data onboarding, normalization, performance tuning, and platform optimization.
Key Skills:
- Splunk Administration (Indexers, Search Heads, Forwarders, Clustering)
- Data Onboarding & Normalization (CIM Compliance)
- SPL Development & Query Optimization
- Dashboard, Alert & Report Development
- Log Ingestion from Syslog, APIs, Cloud & Databases
- Performance Tuning, Troubleshooting & Capacity Management
- Props.conf, Transforms.conf & Field Extractions
- Search Head Clustering (SHC) & Indexer Cluster Management
- Python/Bash/PowerShell Scripting for Automation
Preferred Certifications:
✔ Splunk Enterprise Certified Admin
✔ Splunk Core Certified Architect
If you have hands-on experience in Splunk engineering, SIEM operations, log onboarding, data modelling, and platform performance optimization, we'd love to hear from you.
