Role & responsibilities :

- Overall experience 6-10 years, including SIEM Splunk Enterprise Security administrator, Splunk Enterprise, Splunk Enterprise Security and Splunk ITSI.

- Experience in managing, supporting, deploying and documenting monitoring solutions.

- Experience with Splunk data, use case, deployment, Splunk reporting, Splunk knowledge objects, Splunk searching & optimization, and knowledge of OpenSearch and migration from Splunk to OpenSearch.

- Excellent communication and analytical skills with ability to present technical details to the stakeholders in technical and non-technical backgrounds.

- Very good experience in migration of Splunk indices and dashboards to OpenSearch/ElasticSearch.

- Experience administering and/or developing for an enterprise level implementation of Splunk and OpenSearch (clustered architecture).

- Education : Bachelors degree in information security, Computer Science, or a related field, and a masters in business management is preferred.

Preferred candidate profile :

- Resource will be responsible for End2End Splunk Infrastructure Migration from Physical to Virtual.

- Deploy, Configure, & Manage Splunk Infrastructure (Indexers, Forwarders, Search Heads, Clustering etc.).

- Onboard & Parse New Data Sources into Splunk from Various Platforms (Linux, Windows, Cloud Services, Network Devices, etc.).

- Create & Manage Splunk Knowledge Objects : Dashboards, Alerts, Reports, Saved Searches.

- Manage User Roles, Authentication (e.g., LDAP, SSO), & Access Control.