Splunk Architect

Splunk Architect About the Role We are seeking an experienced Splunk Architect to join our team in (position is remote). In this role, you will be responsible for designing and implementing comprehensive Splunk solutions to support our IT application and infrastructure monitoring needs. The ideal candidate will bring deep expertise in Splunk Enterprise architecture, data ingestion strategies, and advanced analytics capabilities. Position Overview • Job Type: Contract • Location: (Remote) • Experience Required: 5-10 years of experience on Splunk platform • Total IT Experience: 10+ years preferred • Certification: Splunk Enterprise Certified Architect preferred Key Responsibilities • Design, develop, and maintain enterprise-wide Splunk architecture solutions for IT application and infrastructure monitoring • Establish and implement data onboarding strategies, parsing methodologies, and field extraction techniques • Create and optimize data models to support sophisticated search and visualization requirements • Work closely with IT teams and business stakeholders to identify and implement critical KPIs for monitoring • Develop custom dashboards, alerts, and reports tailored to various business units' needs • Ensure all Splunk implementations adhere to organizational security policies and compliance standards • Provide technical leadership and mentorship to team members on Splunk best practices and advanced techniques • Optimize Splunk performance, capacity planning, and scalability considerations • Document architecture decisions, configurations, and implementation guidelines • Evaluate and integrate complementary tools and solutions within the Splunk ecosystem Required Qualifications • 5-10 years of hands-on experience with Splunk Enterprise platform • 10+ years of overall IT experience (preferred) • Demonstrated expertise in designing and implementing Splunk solutions for enterprise environments • Strong proficiency in Search Processing Language (SPL) and creating complex queries • Deep understanding of data ingestion methodologies, parsing techniques, and field extraction strategies • Experience with Splunk IT Service Intelligence (ITSI) implementation and management • Expertise in service tree creation, data correlation strategies, and KPI monitoring frameworks • Strong capabilities in creating custom dashboards and visualizations to meet stakeholder requirements • Excellent knowledge of Splunk administration, including indexer clusters, search head clusters, and deployment servers • Experience with Splunk Apps, Add-ons, and Technology Add-ons (TAs) • Understanding of security best practices and compliance requirements in enterprise environments • Strong problem-solving abilities and analytical thinking skills Preferred Qualifications • Splunk Enterprise Certified Architect certification • Additional Splunk certifications (Admin, Power User, etc.) • Experience with Splunk Enterprise Security (ES) or Splunk User Behavior Analytics (UBA) • Knowledge of Splunk Phantom or other SOAR platforms • Experience with cloud-based Splunk deployments (AWS, Azure, GCP) • Familiarity with DevOps practices and tools • Experience with containerization technologies (Docker, Kubernetes) • Programming/scripting skills in Python, Bash, or PowerShell Key Competencies • Technical Expertise: Deep understanding of Splunk architecture and implementation strategies • Problem-Solving: Ability to troubleshoot complex issues and design effective solutions • Communication: Strong verbal and written communication skills to collaborate with stakeholders at all levels • Leadership: Ability to provide technical guidance and mentorship to team members • Project Management: Experience managing implementation projects and meeting deadlines • Customer Focus: Understanding of business needs and ability to translate them into technical solutions • Adaptability: Willingness to learn new technologies and adapt to changing requirements What We Offer • Competitive salary and benefits package • Professional development opportunities • Collaborative and innovative work environment • Opportunity to work with cutting-edge technology • Career growth potential Qualified candidates are encouraged to apply with a resume and cover letter highlighting relevant Splunk experience and architectural achievements. Please include details of Splunk certifications and major implementation projects you've led. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.