Splunk Developer/ Splunk Consultant

Role & responsibilities

Splunk Consultant 6–10 Years Experience

Job Title: Splunk Consultant
Experience: 6–10 Years
Location: Pune
Employment Type: Full-time

Job Summary

We are looking for an experienced Splunk Consultant with 6–10 years of hands-on experience in Splunk administration, development, monitoring, and security analytics. The candidate will be responsible for designing, implementing, maintaining, and optimizing Splunk solutions to support enterprise monitoring, observability, security, and operational requirements.

Key Responsibilities

• Design, deploy, configure, and administer Splunk Enterprise environments.
• Develop and optimize Splunk dashboards, reports, alerts, and visualizations.
• Create complex SPL (Search Processing Language) queries for data analysis and troubleshooting.
• Develop and maintain Splunk data models, indexes, sourcetypes, field extractions, and knowledge objects.
• Configure data ingestion from various sources such as application logs, servers, databases, cloud platforms, and network devices.
• Work with Universal Forwarders, Heavy Forwarders, Indexers, and Search Heads.
• Monitor Splunk infrastructure and troubleshoot performance, indexing, search, and data ingestion issues.
• Implement Splunk solutions for security monitoring, SIEM, incident investigation, and compliance.
• Integrate Splunk with enterprise tools and third-party applications using APIs, add-ons, and connectors.
• Perform capacity planning, performance tuning, and environment optimization.
• Manage Splunk upgrades, patches, configuration changes, and troubleshooting.
• Implement role-based access control, authentication, and security best practices.
• Collaborate with application, infrastructure, cloud, DevOps, and security teams.
• Automate repetitive operational tasks using scripting and APIs where required.
• Prepare technical documentation, architecture diagrams, and operational procedures.

Required Skills

• 6–10 years of overall IT experience with strong hands-on experience in Splunk.
• Strong knowledge of Splunk Enterprise architecture and administration.
• Excellent knowledge of SPL and search optimization.
• Experience with Splunk Enterprise Security (ES) and SIEM concepts.
• Experience in creating dashboards, alerts, reports, and correlation searches.
• Strong understanding of log management, monitoring, event correlation, and troubleshooting.
• Experience with Linux/Unix environments.
• Knowledge of REST APIs and scripting such as Python, Shell, or PowerShell.
• Experience integrating Splunk with cloud and enterprise applications.
• Good understanding of networking, security, servers, and application infrastructure.
• Strong analytical, troubleshooting, and communication skills.

Good to Have

• Splunk Enterprise Certified Admin / Certified Power User / Certified Architect certification.
• Experience with Splunk SOAR.
• Experience with AWS, Azure, or GCP.
• Knowledge of ITSI, Observability, or Splunk Infrastructure Monitoring.
• Experience with DevOps tools such as Jenkins, Git, Ansible, or Terraform.
• Knowledge of Kubernetes/Docker and cloud-native monitoring.