Monitoring Architect Infrastructure & Operations

MAIN SKILLS

• Splunk Architecture & Design: Lead the design, implementation, and ongoing optimization of the Splunk monitoring platform architecture to ensure scalability, performance, security, and high availability.
• Data Ingestion & Integration: Define and implement strategies for effective data ingestion from various sources (logs, metrics, events) into Splunk, ensuring data quality, completeness, and optimal indexing.
• Monitoring Solution Development: Provide technical leadership and expertise in the development of sophisticated monitoring solutions, dashboards, alerts, and reports within Splunk, ensuring alignment with monitoring requirements and best practices.
• Performance Tuning & Optimization: Continuously analyze and tune Splunk performance, including search head, indexer, and forwarder configurations, to maximize efficiency and minimize operational costs.
• Best Practices & Standards: Establish and enforce technical standards, best practices, and guidelines for Splunk usage, content development, and platform administration, ensuring consistency and maintainability.
• Technical Guidance & Mentorship: Act as a subject matter expert for Splunk, providing technical guidance, support, and mentorship to engineering teams and Splunk users across the organization.
• Troubleshooting & Problem Resolution: Lead the diagnosis and resolution of complex technical issues related to the Splunk platform and its integrated monitoring solutions.
• Innovation & Roadmap Contribution: Contribute to the Monitoring roadmap defined by the Tooling Lead by evaluating new Splunk features, apps, and related monitoring technologies, and proposing innovative solutions.
• Documentation: Create and maintain comprehensive technical documentation for Splunk architecture, configurations, and best practices.

KEY PERFORMANCE INDICATORS (KPIs):

• Splunk Platform Performance: (e.g., Average Search Latency, Data Ingestion Rate, Indexing Performance).
• Architecture Scalability & Efficiency: (e.g., Resource Utilization of Splunk components, Cost-efficiency of design).
• Data Quality & Completeness: (e.g., Percentage of ingested data without errors, Coverage of critical log sources).
• Monitoring Solution Effectiveness: (e.g., Number of critical alerts developed, Reduction in Mean Time To Detect (MTTD) for key incidents).
• Compliance with Best Practices: (e.g., Adherence to established Splunk architectural and configuration standards).

TECHNICAL SKILLS

• Bachelor's or Master's degree in Computer Science, Information Technology, or a related field.
• 5+ years of extensive experience as a Splunk Architect or Senior Splunk Engineer, with a proven track record of designing, implementing, and optimizing large-scale Splunk deployments.
• Deep expertise in Splunk Enterprise, Splunk Enterprise Security (ES) and/or Splunk IT Service Intelligence (ITSI) preferred.
• Strong understanding of data sources, log management, SIEM concepts, and operational monitoring principles.
• Proficiency in Splunk Search Processing Language (SPL) and dashboard creation.
• Experience with cloud platforms (e.g., Azure, AWS, GCP) and integrating Splunk in hybrid cloud environments.
• Knowledge of scripting languages (e.g., Python) for Splunk automation and API integration.
• Familiarity with IT Service Management (ITSM) frameworks (ITIL v4 certification is a plus).

PROFESSIONAL COMPETENCIES & SOFT SKILLS:

• Excellent analytical and problem-solving skills with a strong attention to detail.
• Ability to translate business and operational monitoring requirements into technical Splunk solutions.
• Strong communication and presentation skills, capable of explaining complex technical concepts to diverse audiences.
• Proactive, self-motivated, and able to work independently as well as part of a team.
• Ability to manage multiple technical priorities effectively.