Splunk Implementation Engineer

Position Overview: Our client is seeking a highly motivated and experienced Splunk Certified Implementation Engineer to join their team. A Splunk implementation engineer sets up, configures, and integrates Splunk software so organizations can collect, monitor, and analyze their machine and security data effectively. Key responsibilities: Splunk Architecture & Implementation End-to-end Splunk deployments from environment scoping and architecture blueprinting through production cutover Implement, install, and configure Splunk components. Implement federated search and analytics pipelines, enabling data-in-place querying. Build and tune data onboarding pipelines: configure inputs.conf, props.conf, and transforms.conf to normalize multi-vendor log sources at ingestion time into Splunk CIM-compliant data models. Develop and optimize SPL queries, macros, and scheduled searches to power operational detection use cases. Cisco Data Fabric & Security Stack Integration Implement Splunk data ingestion pipelines from the Cisco security product suite: Cisco Secure Firewall (ASA/FTD), Cisco Secure IDS/IPS, Cisco Identity Services Engine (ISE), Cisco Umbrella, and Cisco Thousand Eyes network intelligence telemetry. Configure and validate Cisco Secure Endpoint and Cisco Threat Grid integration with Splunk ES for advanced malware telemetry correlation. Cisco Meraki, Cisco Secure Network Analytics, Cisco XDR. Operations & Day-to-Day Platform Management Perform platform health and operational stability. Perform capacity planning, index lifecycle management, and Machine Data Lake tiering strategy to control costs without compromising retention SLAs. Execute Splunk version upgrades, patch deployments, and configuration management across all tiers using structured change management processes. Broader Security Platform Responsibilities Manage and optimize next-generation security controls: Cisco Secure Firewall, Palo Alto Networks NGFWs, Fortinet FortiGate, VPN concentrators, Email/Web Security Gateways, and EDR/XDR platforms. Support Privileged Access Management (PAM) solutions and Database Activity Monitoring (DAM) platforms such as IBM Guardium as part of a holistic defense-in-depth security architecture. Lead client-facing implementation workshops, present technical architectures and security findings to both engineering and executive stakeholders, and deliver structured knowledge transfer sessions to upskill client security teams. Maintain accurate project documentation:...

Summary and match are AI-generated; verify details on the original posting.

Listed via Himalayas. All sources