Splunk Administrator

Job Description : Responsibilities :

• Client administration support, including operation and maintenance of the log aggregation and Security Information and Event Management (SIEM) platform.
• Perform systems analysis, modify, and update systems and related data ingestion parameters based on results of analysis, deploy applications and tools, perform testing of deployed applications and tools, and communicate updates to the customer.
• Establish and maintain configuration and technical support, assist in the technical design process, and provide guidance / direction to customer on how to best get value from Client products.
• Maintain, upgrade, and troubleshoot Client servers, clusters, and management systems.
• Install, upgrade, and maintain required Client applications and add-ons.
• Provide performance and license tuning for systems and troubleshoot Client components across multiple network environments.
• Provide solution engineering support to ensure systems and components meet current and future standards.
• Develop, create, deploy, and manage custom Client monitors, alerts, and dashboards.
• Monitor Client for cluster status, health status, and other issues, and resolve as needed.
• Manage patching and updates of Client hosts and / or Client application software.
• Monitor and audit configurations and participate in the Change Management process to ensure that unauthorized changes do not occur.
• Build and integrate contextual data into notable events.
• Design, develop, recommend, and implement Client dashboards and alerts in support of the Incident Response team.
• Develop advanced scripts for the manipulation of data to support analyst requirements.
• Provide recommendations and implement changes to optimize Client in the environment.
• Perform integration activities to connect with 3rd party software APIs.
• Recommend innovative solutions to management and key stakeholders.
• Manage automating Client deployments and orchestration.

Qualifications :