Apply on Employer Site

True Zero Technologies · 2 weeks ago

Splunk Engineer - Core Consultant Certified/ES Accreditation (R-00041)

United States

Full-time

Remote

Mid Level

True Zero Technologies is a veteran-owned small business focused on the purposeful enablement of people and technology. They are seeking a Splunk Engineer to maintain clients' Splunk instances, with responsibilities including data on-boarding, content development, and reporting.

Information ServicesInformation Technology

Responsibilities

Maintaining various clients' Splunk instances with a heavy emphasis on data on-boarding, content development, reporting, and visualizations

Steering IT environments lowering operational risk, challenges, and enhancing service performance

Designing and implementing ground up distributed Splunk installations including all Splunk server roles (Search Head, Indexers, Heavy Forwarders and Universal Forwarders, etc.)

Maintaining and administering enterprise Splunk implementations

Developing custom Splunk content including scheduled searches, reports, dashboards, etc

Proficient at data on-boarding activities including custom parsing rules, custom Technology Add-On building according to Splunk's Common Information Model (CIM)

Configuring indexes, index routing, retention policies, etc

Working in linux and windows environments, ability to configure: Storage subsystems (I.e. partitioning, Volume Groups, Logical Volumes, etc.), SELinux, Familiarity with different flavors of Linux distros (RedHat, CentOS, Ubuntu, etc.), File Permission Settings (linux/windows)

Excellent written and oral skills, ability to work closely with multiple customers, manage expectations, and track engagement scope

Qualification

Splunk Consultant CertificationSplunk ES AccreditationSplunk engineering experienceData on-boardingRBA experienceLinux experienceWindows experienceOral skillsWritten skills

Required

Splunk Consultant Certification

Splunk ES Accreditation

Ability to steer IT environments lowering operational risk, challenges, and enhancing service performance

Experience designing and implementing ground up distributed Splunk installations including all Splunk server roles (Search Head, Indexers, Heavy Forwarders and Universal Forwarders, etc.)

Experience with advanced configuration of Splunk including Indexer Clustering and Search Head Clustering

Experience maintaining and administering enterprise Splunk implementations

Experience developing custom Splunk content including scheduled searches, reports, dashboards, etc

Proficient at data on-boarding activities including custom parsing rules, custom Technology Add-On building according to Splunk's Common Information Model (CIM)

Experience configuring indexes, index routing, retention policies, etc

Experience working in linux and windows environments, ability to configure: Storage subsystems (I.e. partitioning, Volume Groups, Logical Volumes, etc.)

SELinux

Familiarity with different flavors of Linux distros (RedHat, CentOS, Ubuntu, etc.)

File Permission Settings (linux/windows)

Excellent written and oral skills, ability to work closely with multiple customers, manage expectations, and track engagement scope