Splunk SME

Splunk SME Job Summary

About the Role

Support the Splunk architecture review process, focusing on data collection and forwarder configuration/health.

Perform platform health checks and assist in the preparation of compliance reporting deliverables.

Responsibilities

• Provide hands-on support during the on-prem-to-managed transition.
• Mentor and upskill a junior team member in Splunk tasks and best practices.
• Support and maintain Splunk on-premise use cases, particularly for NERC/CIP compliance across OT and Telecom teams.
• Operate within a compliance-driven environment, specifically supporting NERC compliance requirements.
• Design and refine Splunk indexing structure in collaboration with various internal stakeholders.
• Assist with the implementation of Cribl to replace and improve existing logging pipeline/infrastructure.
• Train the team on Splunk content creation, including searches, dashboards, correlation rules, and alerting.
• Adapt to the unique change management processes of a utility SOC/OT environment versus traditional IT/network settings.
• Collaborate closely with partners and SOC teams, ensuring alignment with compliance and operational requirements specific to the utility industry and NERC/CIP standards.

Requirements

Experience with Splunk architecture, data collection, and forwarder configuration/health.

Knowledge of platform health checks and compliance reporting.

Ability to mentor and upskill a junior team member.

Experience with Splunk on-premise use cases, especially for NERC/CIP compliance.

Experience with Cribl implementation and logging pipeline/infrastructure improvements.

Strong collaboration skills and ability to adapt to unique change management processes.

Experience working in a compliance-driven environment, specifically supporting NERC compliance requirements.

Experience with utility SOC/OT environments and traditional IT/network settings.

Qualifications

Bachelor's degree in Computer Science, Information Technology, or a related field.

Minimum 5 years of relevant experience in Splunk administration and support.

Experience with Splunk on-premise use cases, especially for NERC/CIP compliance.

Experience with Cribl implementation and logging pipeline/infrastructure improvements.

Experience working in a compliance-driven environment, specifically supporting NERC compliance requirements.

Experience with utility SOC/OT environments and traditional IT/network settings.

Skills

Proficiency in Splunk architecture, data collection, and forwarder configuration/health.

Experience with platform health checks and compliance reporting.

Strong mentoring and training skills.

Experience with Cribl implementation and logging pipeline/infrastructure improvements.

Ability to adapt to unique change management processes.

Experience working in a compliance-driven environment, specifically supporting NERC compliance requirements.

Experience with utility SOC/OT environments and traditional IT/network settings.

Benefits

Flexible work schedule.

Professional development opportunities.

Competitive compensation package.

Pay

$80,000 - $100,000 annually.

Schedule

Full-time position.