Splunk Developer

Role Summary

The role is responsible for support and enhancement of client's Splunk environment. Splunk is comprised of multiple on-premise installations focused primarily on enabling cybersecurity and enterprise analytic capabilities. This role ensures environments are running optimally, responds to incidents, implements enhancements, and consults on project deliverables.

Key Responsibilities

• Design, automate, and manage data visualization leveraging Splunk.
• Analyze information requirements of customers and support teams to determine the best technical solutions.
• Collaborate with business and technical partners to understand and evaluate their data needs from Splunk.
• Work closely with the Solution Architect to define and evolve data storage and data transformation architecture.
• Mentor other staff in service delivery and problem resolution.

DeliverablesSplunk Solution Delivery

• Contribute to agile development of project timelines, implementation design specifications, system flow diagrams, documentation, testing, and ongoing system support.

Analysis

• Identify gaps between project requirements and available data.
• Assess security requirements.
• Collect business metadata information.
• Identify required tasks and provide effort estimates.

Detailed Requirements Definition

• Prepare design requirement specification documents.
• Identify feasibility and impacts on current environments.
• Ensure that best practices are followed.

Operational Support & Testing

• Develop test cases for reports and dashboards.

Build

• Build reports and dashboards following best practices.
• Create and document technical metadata definitions for each object in datasets.
• Execute unit test plans and provide results reports.
• Manage report generation processes and investigate or resolve failures.

QualificationsMandatory Education

• Post-secondary education in support of computer technology.

Desired Education

• Splunk Enterprise Certified Architect.
• Other related Splunk certifications are an asset.

Mandatory Experience

• Minimum 6+ years’ experience working with Splunk, Splunk ES, and Splunk ITSI.

Desired Experience

• 4+ years’ experience with Splunk ES (Enterprise Security module).
• 2+ years’ experience building dashboards, analytics, and mobile Splunk reports.
• 2+ years’ experience integrating Splunk data into other analytics platforms such as Azure and Power BI.