Cloud Architect

Job Summary

Job Description Splunk Administrator (Banking & Financial Services)

We are seeking an experienced Splunk Administrator to support a Banking & Financial Services engagement. The ideal candidate will have strong hands-on experience with Splunk Enterprise Linux/Unix administration and scripting along with a solid understanding of enterprise security and compliance.

Responsibilities

7+ years of experience as Splunk Administrator supporting Windows and UNIX/Linux-based applications in a multi-tiered enterprise environment.

Hands-on experience in Splunk Administration (Splunk Enterprise) including data onboarding configuration and performance tuning.

Strong Linux/Unix administration and application support experience preferably in a security-focused environment.

Proficiency in scripting/programming (Shell Python or similar) for automation and operational efficiency.

Good understanding of enterprise security concepts compliance and governance frameworks (audit access control etc.).

Experience working with cloud-based and network security environments.

Familiarity with ServiceNow for incident/change management.

Strong analytical troubleshooting and communication skills.

Administer and support Splunk Enterprise platform including managing data sources ingestion pipelines and knowledge objects.

Manage and support Cribl LogStream and SyslogNG data pipelines and integrations.

Perform troubleshooting of functional and performance issues including root cause analysis and remediation documentation.

Monitor and report daily system health status.

Develop and maintain automation scripts to streamline repetitive operational tasks.

Define and report KPIs and operational metrics.

Diagnose and resolve production issues collaborating with cross-functional teams as required.

Execute production configuration changes in line with banking change management policies.

Maintain comprehensive technical documentation (runbooks troubleshooting guides deployment procedures).

Coordinate with vendors and SMEs for escalations when necessary.

Plan and execute Splunk version upgrades and platform enhancements.

Participate in design reviews and Disaster Recovery (DR) testing activities.

Exposure to banking/financial services domain.

Experience with monitoring/log analytics tools integration.