Vacancy expired!
Overview
The Splunk Engineer, under the direction from the Global Infrastructure Engineering Manager, will focus on adding data, creating alerts, facilitate the ITSI buildout, support and manage the Splunk environment as a platform for the company. The focus for this position is on advanced Splunk architecture, ITSI, administration, and development efforts. This focus is aimed at a goal of enhancing the Splunk infrastructure as it relates to application/machine logs, troubleshooting, reporting, custom queries, dashboards, and security roles administration, all within a highly critical PII data environment. Additionally, the successful engineer will focus on continual process improvement, continually pushing the technology, and thinking outside the box to maximize value to the application teams and business. Responsibilities JOB DUTIES- Work with teams to maximize Splunk value and effectiveness
- Recommend improvements to existing Splunk environments
- Build and support Splunk ITSI correlation searches, Services, and KPI's
- Architect, design, support, maintain, and expand Splunk infrastructure in a highly resilient configuration
- Standardized Splunk agent deployment, configuration and maintenance across a variety of UNIX and Windows platforms
- Assist internal users of Splunk in designing and maintaining production-quality dashboards
- Mentor and train Splunk users and administrators
- Develop and mentor other organizations on their use of Splunk
- Monitor the agent and server infrastructure for capacity planning and optimization
- Build, implement, configure TA's and Apps
- Assist with automation of processes and procedures
- Support syslog-ng server environment
- Create and maintain Splunk alerts created for customers to monitor business critical applications
- Design core Systems performance and troubleshooting logs
- Technical writing/creation of formal documentation such as architecture diagrams, technical designs, and SOPs
- Perform other duties as assigned
- Conform with all company policies and procedures
- Advanced knowledge of regular expressions
- Strong knowledge of application monitoring and event management
- Strong working knowledge of Splunk ITSI
- Advanced knowledge of business processes for supported business groups
- Knowledgeable of best practices in information technology governance and regulatory landscape for financial institutions
- Understanding of Network Firewalls, Load-balancers, and complex network designs
- Knowledge of security methodologies, policies, standards and best practices
- Advanced working knowledge of information systems and operations systems for supported business groups
- Ability to design, architect and implement Splunk solutions
- Basic SQL query experience
- Experience with containerization platforms such as Docker, Kubernetes, etc a plus
- Experience with technologies such as Windows and Linux OS, Syslog-ng, F5 load balancing, VMWare, etc
- Understanding of System Log Files and other structured and non-structured data
- Experience in an environment that follow ITIL Change & Configuration Management processes
- Intermediate knowledge with the Splunk Common Information Model (CIM)
- Administer Splunk and Splunk Apps to include extending/modify existing Apps to perform specialized functionality
- Prior experience in the Financial Services industry is a plus
- Broad industry knowledge of application monitoring and event management preferred
- In depth understanding of Splunk license management preferred
- Basic understanding of AIX, Linux and Windows operating systems
- Basic understanding Python development, API/REST queries, BASH shell
- Certificate services and how to configure SSL in either IIS or Apache
- Advanced knowledge of information technology systems, infrastructure and operations
- Proficiency developing log ingestion and aggregation strategies
- Advanced SPL and regex development abilities
- Advanced ability to create and work request items and tasks in Service Now
- Strong in the use of Microsoft Office software including strong ability to analyze data using Excel for reporting and data mining purposes
- Strong people skills including the ability to interact with employees at all levels
- Excellent written and oral communication skills that include the ability to describe highly technical concepts in non-technical terms
- Able to think and react positively and professionally even in stressful situations
- Ability to meet expected delivery dates and the tasks necessary to achieve objectives
- Experience in multi-platform scripting (ieBASH, batch, PowerShell, Python, or Java)
- Must be a self-starter and able to manage the investigations function with minimal supervision
- Advance experience with data visualization concepts and tools
- Advanced computer skills and conversance in information technology issues
- Bachelor's Degree in related field or equivalent work or military experience required
- 3-5 years experience architecting and administering Splunk in a production environment running 24x7 required
- Splunk Enterprise Certified Admin preferred
- Splunk ITSI Certified Admin preferred
Vacancy expired!