Administrator

We have an opportunity for a Splunk Administrator (Splunk Engineer with DevOps Engineering experience)

This is an initial 3-month contract with possible extensions to be based onsite in Dubai.

Work with various stakeholder teams to develop a new Splunk architecture for significant volume.
Re-evaluate Splunk deployments to improve architecture, knowledge models, user experience, performance, and stability.
Managing, administering, and engineering a large Splunk infrastructure.
Experience in Splunk systems management in large, clustered environments.
Experience scripting with Splunk REST API.
Good knowledge of Splunk data ingestion, field extraction, and post ingestion processing.
Knowledge of summarising and cleansing data mainly JSON.
Deep knowledge of Splunk behaviour in automation tasks which includes Splunk App deployments, rolling restarts, Splunk updating/upgrading.
Working knowledge of a scripting language – Python, Ruby, Bash; in concert with AWS SDK.
Data engineering experience, (Kafka, Kinesis, Logstash, Filebeat, Vector)
Experience with search processing language (SPL), RegEx, Reporting, dashboard development, and search acceleration techniques.
Working knowledge of Splunk products (Splunk cloud and other Splunk premium applications.
Working knowledge of cloud solutions and Splunk in Azure.
Instrument basic data ingestion into Splunk using standard logging and understand creation of visualisation.
Instrument advanced data ingestion using addons, HEC, Containers, and cloud.
Good Communication skills.