Responsibilities:
Architect multi-site Splunk cluster that can handle 20 tera bytes per day ingestion volume
Well versed with Splunk Kafka connect architecture, and Kubernetes.
Provide day-to-day support on maintaining a large Splunk implementation (multi tera bytes per day log volume)
Be on-call for responding to any Splunk related issues and resolve/escalate on time
Work with Application teams (the users of Splunk) to resolve any usability issues reported
Develop monitoring for ensuring Splunk infrastructure health (Disk usage, CPU/Memory usage, Performance)
Ensure Splunk infrastructure is up and running and performing with maximum efficiency 24X7
Develop reports on Splunk usage share with team and upper management
Qualifications:
Bachelors degree.
Strong intensive Splunk, Kubernetes and Kafka Experience.
Heavy experience should be on Splunk Enterprise, multi site clustering and Search Head Clustering.
Well versed with Kafka and Kubernetes and Splunk Connect for Kafka experience is required.
Preferred candidates with Splunk Certifications Atleast Architect with automation tools (Ansible, Terraform, Github Actions).
Any Graduate