Splunk Architect

This is a remote position. Location: Remote / Hybrid (as required by project) Australia based Contract Duration: 2-3 months (extendable) Rate: Competitive, based on experience Role Summary: The Splunk Architect will be responsible for designing, optimising, and implementing Splunk-based solutions to enhance log management, security monitoring, and operational intelligence. The role will require deep expertise in Splunk architecture, data ingestion strategies, and SIEM integration, ensuring a scalable and cost-effective logging strategy. Data ingest optimisation skills are essential. You must be based in Australia and pass police clearance. Key Responsibilities: - Identify data optimisation opportunities in data pipelines to ensure cost-effective data storage and retrieval. - Work closely with security teams and stakeholders to develop logging strategies aligned with compliance and security needs. - Lead the implementation of data filtering, indexing strategies, and storage optimisations. - Integrate Splunk with other data sources and security tools to support threat detection and incident response. - Provide recommendations for Splunk licensing optimisation and cost reduction. - Design and implement Splunk architectures to support log ingestion, processing, and analysis at scale. - Develop and document Splunk architecture, best practices, and operational runbooks. - Lead troubleshooting efforts for performance and ingestion issues. - Evaluate and implement Splunk add-ons such as Splunk DMX and Cribl to improve data processing. - Lead a small team to implement optimisations and other tasks​ Requirements Required Skills & Experience: - 5+ years of experience in designing and implementing Splunk architectures. - Strong understanding of Splunk Cloud, Splunk Enterprise Security (ES), and log management best practices. - Hands-on experience with Splunk data ingestion, parsing, and indexing. - Expertise in data modelling, CIM compliance, and SIEM integrations. - Experience with AWS, Azure, or other cloud environments. - Familiarity with log pipeline tools such as Cribl or Splunk DMX. - Knowledge of scripting languages (Python, Bash, PowerShell) for automation. - Strong problem-solving and communication skills. - You must be based in Australia and pass police clearance.​ Benefits - Competitive Contract Rates:Get paid well for your expertise and contributions. - Remote & Hybrid Flexibility:Work from anywhere or engage on-site as needed. - Challenging & Impactful Work:Be a part of high-impact projects optimising security and logging strategies. - Short-Term with Potential Extensions:Ideal for professionals looking for flexible, extendable contracts. - Hands-on Exposure to Cutting-Edge Tech:Work with tools like Splunk Cloud, Cribl, Splunk DMX, and AWS/Azure environments. - Collaboration with Experts:Join a team of experienced professionals in security operations and data analytics. - Opportunities for Skill Enhancement:Learn from industry-leading experts and enhance your Splunk expertise. - Future Opportunities:Successful contributions could lead to longer-term engagements and additional contracts. - Innovative Work Environment:Work in a forward-thinking team that encourages creativity and problem-solving. - Professional Growth:Engage in projects that enhance your resume and keep you at the forefront of industry developments. - Work-Life Balance:Flexible working hours that allow you to maintain a balanced professional and personal life. - Supportive Company Culture:Join an organisation that values its people, fosters a positive work environment, and supports career progression. - Exposure to Enterprise-Level Deployments:Gain hands-on experience in large-scale, enterprise security environments, working alongside industry leaders. - Network & Build Industry Connections:Work with experts and expand your professional network in the cybersecurity and observability fields. Originally posted on Himalayas