Splunk Automation Engineer-AVP

Job Description :

Job Title: Splunk Automation Engineer-AVP

Experience 10-13 Years

Qualification BE / B. Tech / M. Tech - Computer Engineering

Role & Responsibilities:

Key responsibilities include:

• Splunk Platform Engineering - Administer and optimize enterprise Splunk environments, including Search Heads, Indexers, Forwarders, Deployment Servers, and Cluster Managers.
• Data Onboarding & Integration - Integrate infrastructure, application, cloud, and security data sources into Splunk and ensure reliable log ingestion and parsing.
• SPL & Monitoring - Develop advanced SPL queries, dashboards, reports, alerts, and visualizations to provide effective operational and security monitoring.
• Splunk Premium Solutions - Work with Splunk ITSI, Enterprise Security (ES), and SOAR to enhance observability, threat detection, event correlation, and incident response.
• Automation with Ansible - Design reusable Ansible playbooks, roles, and workflows for deployments, maintenance, monitoring, health checks, and incident remediation.
• Python Automation - Develop Python scripts, utilities, API integrations, and automation services to reduce manual operational activities.
• Event-Driven Automation - Build workflows that connect Splunk/SIEM alerts with automated remediation, ServiceNow, and other enterprise operational processes.
• Enterprise Observability - Integrate Splunk with ServiceNow, cloud platforms, monitoring tools, security solutions, and middleware to provide end-to-end visibility.
• Operations, Governance & Risk - Support Incident, Problem, Change, and Request Management while ensuring compliance with ITIL, cybersecurity controls, regulatory requirements, and technology governance.
• Resilience & Continuous Improvement - Perform capacity planning, performance tuning, platform health monitoring, major incident support, documentation, audit evidence collection, and improvements aligned with SRE principles.

Qualifications

• Education - Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field.
• Overall Experience - Minimum 10 years of IT experience, including at least 6 years of hands-on Splunk Engineering, SIEM, or Enterprise Observability experience.
• Enterprise Splunk Expertise - Proven experience designing, implementing, administering, and supporting large-scale Splunk deployments in mission-critical environments.
• Splunk Administration & Architecture - Strong knowledge of Splunk architecture, clustering, administration, performance tuning, capacity planning, and data onboarding.
• Advanced SPL Skills - Expertise in SPL development, correlation searches, dashboards, reports, analytics, alerts, and data models.
• Automation Skills - Hands-on experience with Ansible Automation Platform and Python for developing automation, integrations, and operational workflows.
• Linux/RHEL Expertise - Strong practical experience working with Linux/Red Hat Enterprise Linux (RHEL) environments.
• Enterprise Integrations - Experience integrating Splunk with ServiceNow, cloud platforms, monitoring tools, security technologies, and other enterprise systems.
• Troubleshooting & Banking Experience - Strong root-cause analysis, troubleshooting, and problem-solving skills in complex distributed environments, preferably within banking/financial services or other regulated industries.
• Preferred Skills & Certifications - Splunk certifications such as Enterprise Certified Architect/Certified Admin, plus Red Hat/Ansible/Python certifications knowledge of SRE, observability, AIOps, AWS/Azure/GCP, cybersecurity, and regulatory compliance.