Splunk Engineer

Description

Job title Splunk Administrator (Senior System Engineer I, Senior System Engineer II)
Our Monitoring and Event Management (MEM) team is looking for individuals with strong Splunk Admin background to support GEICOs fast growing Splunk platform. MEM is also looking for individuals with strong Splunk development background to support Splunk ITSI. The candidates prime responsibilities, but not limited to, include data onboarding (including syslog), troubleshooting multiclustered Splunk Enterprise environments, troubleshooting Splunk Cloud issues, assist internal Splunk users on query optimization and visualization, write complex regex for field extractions, build data model and support ITSI.
SENIOR SPLUNK CANDIDATES ONLY
Splunk technical responsible for the design, performance, implementation and capacity of the Splunk Platform, including Splunk Cloud.
Provides senior support for System Admins, Content Manager and Service Engineer to ensure the delivery of Splunk best practices and standards related to each job function
Standardize Splunk platform deployment based upon proven best practice methods, to include configuration and maintenance across a variety of UNIX and Windows platforms
Troubleshoot and support Splunk Platform and associated topologies on multiple operating systems
Must understand and deploy multicluster/cluster distributed architectures and application deployment processes
Assist internal users of Splunk in designing and maintaining production quality dashboards, reports, visualizations and alerts
Assist and support organizations in deploying Splunk platform across networks
Provide assessment services to determine data inputs and sources of machine data to be ingested into the Splunk platform
Monitor the Splunk Platform for capacity planning and optimization
Provide services to tweak and fine tune existing Splunk deployments
Help design core systems performance metrics and troubleshooting logs expertise for customers
Troubleshoot and support Splunk Platform and associated topologies on multiple operating systems
Monday Friday 8 5pm
3+ years experience with Splunk on a large enterprise level
5+ years in IT infrastructure, networking, architecture, administration, or security
Ability to multitask and solve complex technical problems
Experience working in a multiserver environment
PERL/Linux shell scripting/Regex experience would be highly preferable
Superior communication and presentation skills
Splunk training and/or certifications would be a major plus
Desired Skills Must understand and deploy multicluster/cluster distributed architectures and application deployment processes
Ability to support and automate processes and procedures
Ability to assess design models to maximize data ingest and work with performance metrics to fine tune Splunk
Ability to customize and install apps to maximize visibility throughout the organization
Ability to create run books, operating procedures, and repeatable processes as needed
Ability to administer new and existing Splunk Platform and cloud deployments