Splunk

TCS has been a great pioneer in feeding the fire of young techies like you. We are a global leader in the technology arena and theres nothing that can stop us from growing together.

What we are looking for

Role: Splunk

Experience Range: 5 to 10 Years

Location: Chennai /Bengaluru/Hyderabad

Must Have:

1. Expertise in Splunk, including native Splunk features and data ingestion workflows.
2. Experience with CI/CD toolchains such as Azure DevOps and GitHub.
3. Proficiency in scripting and general software development/testing.
4. Ability to instrument basic data ingestion into Splunk using standard logging, build visualizations, and configure event notifications.
5. Ability to instrument advanced data ingestion using Add‑Ons, HEC, containers, and cloud platforms.
6. Collaborate with customers to understand requirements and ensure delivery of appropriate ingestion solutions.
7. Work with Splunk and cloud teams to enable custom ingestion support and onboard data from cloud and containerized environments.
8. Diagnose ingestion issues involving Add‑Ons, HEC, containers, and cloud sources.
9. Working knowledge of Splunk Cloud and Splunk premium applications.
10. Familiarity with cloud platforms and container technologies such as Docker, OpenShift, and Kubernetes.
11. Understanding of web server logs, syslog, and operating system logs.
12. Experience with Infrastructure as a Service (IaaS) and development using Python.
13. Ability to maintain work item updates and keep backlog items current.
14. Demonstrated capability to support ingestion workflows with technical proficiency, operational reliability, and adherence to organizational standards.
15. Ability to support data ingestion pipelines, including Splunk/Cribl ingestion, pipeline execution, log stream management, and observability tooling.
16. Proficiency in SPL, regular expressions, and scripting languages such as Python, Bash, or PowerShell for automation and troubleshooting.
17. General IT knowledge in networking, operating systems, cloud environments, and security principles to support ingestion workflows effectively.
18. Understanding of infrastructure/configuration‑as‑code tools such as Terraform.
19. Splunk certifications: 100% Power User and at least two Cloud Admin certifications.
20. Experience with Cribl ingestion, pipeline execution, monitoring, and support.
21. Familiarity with integration between ingestion pipelines and downstream observability platforms (dashboards, alerting systems, data lakes).
22. Ability to provide operational support, including incident resolution, troubleshooting, and 24/7 on‑call availability for critical ingestion pipeline outages.

Good to Have:

1. Well organized with ability to multi-task and work with minimum supervision with quick learning skills.
2. Strong interpersonal and negotiation skills. Collaborate with cross-functional teams to identify and resolve technical issues

Essential:

1. Responsible for the daily operations and maintenance of the Splunk solution, ensuring Incidents and workorders related to data ingestion, ensure data is ingested, parsed, and readily available for users, while also managing security, performance, and user access.
2. Configure data inputs and forwarders to ingest data from various sources. Manage Splunk deployment, including distributed deployments.
3. Troubleshoot Log feeds, field extractions, and search performance. Close the incidents with proper updates with in SLA, Complete workorders with in SLA.
4. Ensure timely closure of incidents and work orders and also data onboarding and parsing according to user needs
5. Ability to upskill and track learning progress
6. Ability to attend / present weekly, monthly reports to clients
7. Familiar with enterprise ticketing system (Remedy).

Minimum Qualification:

• 15 years of full-time education
• Minimum percentile of 50% in 10th, 12th, UG & PG (if applicable)