Beschreibung
Your responsibilities:Summary: you are part of a Splunk Project Team that maintains and improves a large, existing Multi-Site clustered Splunk instance in an Enterprise environment.
Your two key areas of responsibility are to a) Design & Build new features, b) Run the System
1. Design & Build new features:
* Help refine business requirements
* Assist with release planning activities
* Visualize architecture aspects such as multisite clustering, DR capabilities, failover scenarios, etc.
* Be responsible for the Design of the Data Integration piece of that solution
* Document and visualize the Data Integration Designs as well as the interface specifications
* Be responsible for hardware sizing to cover possible extension of the infrastructure
* Cover all security policies in terms of Access Management, Data Protection etc. and include that in the Architecture
* Work with users and other stakeholders to implement new features
* Guide the configuration of the Enterprise Security App to reflect use cases
* Build solutions in the DEV environment (e.g. data onboardings, Apps and Add-on's, configurations etc.)
* Document all design artifacts
* Estimate efforts for all tasks
* Support the Quality Manager by testing the solution, by generating suitable test data etc.
* Be responsible for troubleshooting
2. Run the System
* Help troubleshooting + issue fixing efforts
* Liase with other support groups (e.g. UNIX admins) to get issues resolved
* Prepare the deployment of new features
* Support Go Live activities
* Improve the System and its Monitoring, and Configuration automation capabilities
* Support the day-to-day running of the System
Your profile
Must have:
* Several years of proven experience with large scale Splunk Projects including Splunk clustered, distributed Splunk environments etc. at Terabyte/Petabyte scale
* Proven experience with the implementation of Use Cases in Splunk
* Proven experience with the use and configuration of the Splunk Enterprise Security App to cover security related use cases
* At least 5 years of experience with IT Projects in large Enterprises
* Solid experience with typical Enterprise polcies, especially concerning Infrastructure, Access Management, Data Protection, etc.
* Versed in Security Information Management & Operational Intelligence
* Solid and proven experience with Network Security Concepts
* Splunk Certified Administrator
* Excellent communication skills in English (German nice to have)
* Team player
* Proven ability to visually illustrate complex processes and IT systems in a comprehensive manner (e.g. Visio)
* Experience with performance critical data processing at large scale using files, data streams, or databases
Nice to have:
* Background in Enterprise IT Architecture and Solution Design
* Background in IT Security
* Experience with testing IT Systems and Data Integration systems
* Experience with working in internationally distributed cross-functional teams
* Splunk Certified Architect