Notice Period : Immediate Joiners Preferred

Role Overview :

We are seeking an experienced Splunk Architect to design, implement, and optimize enterprise-scale Splunk environments.

This role involves leading architecture decisions, ensuring scalability, and delivering robust SIEM solutions for monitoring, security, and analytics.

Key Responsibilities :

- Design and implement end-to-end Splunk architecture for enterprise environments

- Configure and manage Indexer Clusters, Search Head Clusters, and Forwarders

- Lead deployment and optimization of Splunk Enterprise Security (ES)

- Ensure high availability (HA), disaster recovery (DR), and scalability of the platform

- Develop and optimize SPL queries, dashboards, and data models

- Implement security use cases, alerting, and correlation rules (SIEM)

- Monitor system performance and drive performance tuning & optimization

- Integrate Splunk with third-party tools, APIs, and data sources

- Collaborate with cross-functional teams for solution design and delivery

- Provide technical guidance and mentorship to junior team members

Required Skills :

- Strong hands-on experience in Splunk Architecture & Administration

- Expertise in SPL (Search Processing Language)

- Experience with Splunk ES (Enterprise Security)

- Knowledge of log management, SIEM, and monitoring tools

- Hands-on with data onboarding, parsing, and data modeling

- Experience with cloud platforms (AWS / Azure / GCP)

- Strong understanding of Linux/Unix systems

- Excellent problem-solving and analytical skills

- Strong communication and stakeholder management

Good to Have :

- Experience in DevOps / CI-CD pipelines

- Knowledge of automation & scripting (Python / Shell)

- Exposure to ITIL processes and security frameworks

- Splunk certifications (Splunk Architect / Admin / Power User)

Qualifications :

- Bachelors degree in Engineering / Computer Science or related field

- 10+ years of overall IT experience with strong Splunk expertise