Splunk Content Developer

About the role

The Splunk Content Developer will be responsible for installing and maintaining Splunk infrastructure, gathering requirements from customers, onboard data, and assisting end users with searches, dashboards, reports, and knowledge objects. This role may involve interacting with senior management.

Responsibilities

• Install and maintain Splunk infrastructure
• Gather requirements from customers
• Onboard data from various sources
• Assist end users with Splunk searches, dashboards, reports, and knowledge objects
• Work independently with little oversight
• Manage multiple assignments and changing priorities
• Design, build, and maintain customer-supported tools and platforms
• Manage data storage, access, and retention strategies for a large IT enterprise
• Create, manage, and support automation solutions for Splunk deployment and orchestration in on-prem and cloud environments
• Collaborate with existing and custom Splunk applications and add-ons to fulfill customer needs
• Provide engineering and design support for a distributed Splunk environment
• Conduct periodic architectural reviews of Splunk and related systems
• Develop and manage comprehensive documentation, artifacts, procedures, and processes for the Splunk infrastructure

Requirements

• Bachelor's Degree and 12-15 years of experience in system administration, database administration, network engineering, software engineering, or software development, with a concentration in Cybersecurity
• 12-15 years of experience with Linux and Windows system administration or an expert understanding of operating systems and common operating environments
• 10 years of experience with Splunk in distributed deployments
• Current Splunk Enterprise Certified Architect certification
• Expert-level knowledge and ability with Splunk Enterprise Security or integration with other SIEM platforms
• Extensive experience with advanced configuration of Splunk including Indexer Clustering and Search Head Clustering
• Proficiency onboarding data using Splunk-developed add-ons for Windows, Linux, and common third-party devices and applications
• Proficiency managing Splunk using the Splunk command-line interface and configuration files
• Experience with Splunk performing systems administration, including performing installation, configuration, monitoring system performance and availability, upgrades, and troubleshooting
• Intermediate understanding of SQL and common SQL dialects
• Experience with Splunk DB Connect
• Experience with Splunk performing systems administration, including performing installation, configuration, monitoring system performance and availability, upgrades, and troubleshooting
• Experience in managing, maintaining, and administering multi-site indexer clusters
• Proficiency developing log ingestion and aggregation strategies per Splunk best practices
• Experience implementing and optimizing Splunk data models
• Scripting and development skills (Bash, Python, or PowerShell)
• Ability to autonomously prioritize and successfully deliver across a portfolio of projects

Qualifications

• Basic Qualifications
• Additional years of experience and Cyber certifications may be considered in lieu of a degree
• Expert-level knowledge and ability with Splunk Enterprise Security or integration with other SIEM platforms
• Extensive experience with advanced configuration of Splunk including Indexer Clustering and Search Head Clustering
• Proficiency onboarding data using Splunk-developed add-ons for Windows, Linux, and common third-party devices and applications
• Proficiency managing Splunk using the Splunk command-line interface and configuration files
• Experience with Splunk performing systems administration, including performing installation, configuration, monitoring system performance and availability, upgrades, and troubleshooting
• Intermediate understanding of SQL and common SQL dialects
• Experience with Splunk DB Connect
• Experience with Splunk performing systems administration, including performing installation, configuration, monitoring system performance and availability, upgrades, and troubleshooting
• Experience in managing, maintaining, and administering multi-site indexer clusters
• Proficiency developing log ingestion and aggregation strategies per Splunk best practices
• Experience implementing and optimizing Splunk data models
• Scripting and development skills (Bash, Python, or PowerShell)
• Ability to autonomously prioritize and successfully deliver across a portfolio of projects

Skills

• Linux and Windows system administration
• Splunk Enterprise Security or integration with other SIEM platforms
• Advanced configuration of Splunk including Indexer Clustering and Search Head Clustering
• Data on-boarding activities including routing, parsing, and normalizing events to the Splunk CommonInformation Model (CIM)
• Onboarding data using Splunk-developed add-ons for Windows, Linux, and common third-party devices and applications
• Managing Splunk using the Splunk command-line interface and configuration files
• Collaborating with separate engineering teams to configure data sources for Splunk integration
• Intermediate understanding of SQL and common SQL dialects
• Experience with Splunk DB Connect
• Experience with Splunk performing systems administration, including performing installation, configuration, monitoring system performance and availability, upgrades, and troubleshooting
• Experience in managing, maintaining, and administering multi-site indexer clusters
• Proficiency developing log ingestion and aggregation strategies per Splunk best practices
• Experience implementing and optimizing Splunk data models
• Scripting and development skills (Bash, Python, or PowerShell)

Benefits

Pay Range $131,300.00 - $237,350.00

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement.