Splunk Developer

This is a crucial role within the business, supporting one of the largest platforms in Australia. You will be the eyes of the enterprise, monitoring and onboarding applications.

Essential capabilities

• Design and implement monitoring solutions for new and existing systems; utilising Splunk and/or other monitoring tools such as Elastic Search, aligned to standard patterns. Also, contribute to the creation of new monitoring patterns where required.
• Data onboarding: Requirements gathering, design, implementation, and testing, to onboard new data sources to Splunk – via Universal Forwarders, HTTP Event Collector, APIs, syslog, etc.
• Map data to Splunk CIM, to meet stakeholder and data governance requirements.
• Deploy and configure Splunk premium add-ons (Enterprise Security and ITSI).
• Provide level 2 technical support. Assist with level 3 incident and problem investigations, service risks and issues for Splunk Enterprise, Splunk Enterprise Security, and Splunk ITSI.
• Performance optimisation – Optimise existing and new search queries and dashboards to improve performance.

Experience

• Strong knowledge of Splunk architecture, administration, and custom development (Splunk certified admin/architect/developer or equivalent experience) across Splunk Enterprise, Splunk Enterprise Security, and Splunk ITSI.
• Experience administering and/or developing for an enterprise-level implementation of Splunk (clustered architecture).
• Proficient in Splunk query language (SPL) and experienced in developing and supporting custom Splunk search head applications for specific use cases.
• Strong technical knowledge of Red hat Linux, Firewalls, and Load Balancing principles
• Extensive knowledge and experience of Agile and DevOps.
• AWS – architect and sysops certified or equivalent. Azure and/or GCP experience is also preferred.
• Ansible, CD tools, particularly Jenkins.
• Scripting – Linux Shell & Python.
• Linux OS (preferable Red hat proficiency).
• Experienced user of Git / GitHub, Selenium, Docker, Kubernetes, Splunk UBA, Splunk Phantom, Syslog-ng and/or syslogs, JIRA, Confluence.

Salt is acting as an Employment Agency in relation to this vacancy.