| Splunk Administrator - Atlanta, GA REMOTE at Atlanta, Georgia, USA |
| Email: [email protected] |
| From: Mahesh, Mindfore Inc [email protected] Reply to: [email protected] Job Title: Splunk Administrator Location: Atlanta, GA REMOTE Duration: Long Term The selected candidate will be responsible for: Splunk administration support, including operation and maintenance of the log aggregation and Security Information and Event Management (SIEM) platform. Perform systems analysis, modify, and update systems and related data ingestion parameters based on results of analysis, deploy applications and tools, perform testing of deployed applications and tools, and communicate updates to the customer. Establish and maintain configuration and technical support, assist in the technical design process, and provide guidance/direction to customer on how to best get value from Splunk products. Maintain, upgrade, and troubleshoot SPLUNK servers, clusters, and management systems. Install, upgrade, and maintain required SPLUNK applications and add-ons. Provide performance and license tuning for systems and troubleshoot SPLUNK components across multiple network environments. Provide solution engineering support to ensure systems and components meet current and future standards. Develop, create, deploy, and manage custom SPLUNK monitors, alerts, and dashboards. Monitor SPLUNK for cluster status, health status, and other issues, and resolve as needed. Manage patching and updates of Splunk hosts and/or Splunk application software. Monitor and audit configurations and participate in the Change Management process to ensure that unauthorized changes do not occur. Build and integrate contextual data into notable events. Design, develop, recommend, and implement Splunk dashboards and alerts in support of the Incident Response team. Develop advanced scripts for the manipulation of data to support analyst requirements. Provide recommendations and implement changes to optimize Splunk in the environment. Perform integration activities to connect with 3rd party software APIs. Recommend innovative solutions to management and key stakeholders. Manage automating Splunk deployments and orchestration. Qualifications At least five (5) years of experience with Splunk implementing and administering Splunk and Splunk Enterprise Security Experience writing Splunk queries in Splunk Programming Language (SPL) Certified Splunk Enterprise Administrator or Certified Splunk Administrator Analytical ability, problem-solving skills, and ability to break down complex problems into actionable steps. Experience must include a wide range of work in creating diagrams and documentation with all components that comprise IT systems including network topology. Experience developing in any of the languages Bash, Perl, Shell, Powershell, SQL, D3, HTML, XML, CSS, Bash, JAVA and/or Python scripts. Required / Desired Skills: Required bachelors degree in computer science, management information systems, or related field combined with experience. Required 4 Years Experience in AWS Required 4 Years Experience as a System Administrator Required 4 Years Experience in public cloud environments, including AWS and/or Azure. Required 4 Years Experience with automation using an established framework (SaltStack, Puppet, Chef, Ansible, etc.) Required 5 Years Experience in Splunk Administration Required Strong system administration experience in Windows and Linux environments. Required 4 Years Experience writing Splunk queries in Splunk Programming Language (SPL) Required 4 Years Experience developing in any of the languages Bash, Perl, Shell, Required PowerShell, SQL, D3, HTML, XML, CSS, Bash, JAVA and/or Python scripts. Required Certified Splunk Enterprise Administrator or Certified Splunk Administrator (MUST UPLOAD CERTIFICATION) Keywords: information technology Georgia |
| [email protected] View all |
| Mon Nov 27 20:20:00 UTC 2023 |