Splunk Architect

Envision Employment Solutions is currently looking for a Splunk Architect for one of our partners, a global leader in consulting, digital transformation, technology and engineering services.
This position requires flexibility to work on US times and flexibility to travel abroad when needed.

**Responsibilities**:

- Architecture and Design:

- Develop end-to-end Splunk architecture, including data ingestion, parsing, indexing, and visualization.
- Create scalable and reliable Splunk solutions tailored to meet business and operational requirements.
- Implementation and Deployment:

- Lead Splunk deployment and configuration, including cluster design for high availability and disaster recovery.
- Design and implement data onboarding processes, ensuring clean and optimized data ingestion from various sources.
- Monitoring and Optimization:

- Oversee the performance and health of Splunk infrastructure, identifying and resolving bottlenecks.
- Optimize searches, dashboards, and alerts for efficiency and effectiveness.
- Collaboration and Leadership:

- Work closely with stakeholders, including IT, Security, and Development teams, to gather requirements and deliver solutions.
- Provide technical leadership, mentoring, and training to Splunk users and administrators.
- Security and Compliance:

- Design Splunk solutions to meet organizational security and compliance standards.
- Implement role-based access controls and best practices for data security.
- Troubleshooting and Support:

- Diagnose and resolve Splunk-related issues in a timely manner.
- Provide ongoing support and maintenance for the Splunk environment.

**Requirements**:

- Education and Experience:

- Bachelor’s degree in Computer Science, Information Technology, or a related field.
- years of experience in IT operations, data analytics, or security, with a focus on Splunk.
- Technical Expertise:

- Proven experience as a Splunk Architect or similar role, with a deep understanding of Splunk Enterprise.
- Hands-on experience with Splunk Enterprise Security (ES), ITSI, or Phantom is a plus.
- Strong knowledge of data ingestion methods (e.g., Universal Forwarders, APIs, Syslog).
- Proficiency in creating advanced searches, dashboards, and SPL queries.
- Architecture and Integration:

- Expertise in designing clustered environments with scalability and high availability.
- Familiarity with cloud-based Splunk implementations (e.g., AWS, Azure, GCP).
- Problem-Solving and Collaboration:

- Strong analytical skills and ability to troubleshoot complex technical issues.
- Excellent communication and collaboration skills to work effectively with cross-functional teams.
- Certifications (preferred):

- Splunk Enterprise Certified Architect.
- Splunk Core Certified Power User.
- Additional certifications in security or IT infrastructure are a plus (e.g., CISSP, AWS).

**Benefits**:

- Competitive Salary based on experience
- Social and medical insurance
- Learning, development and career progression