Splunk IT Operation Support Resident Engineer 7882

• 7882

The role of a Splunk Engineer centers around the management and optimization of Splunk, a powerful platform used for searching, monitoring, and analyzing machine-generated big data. This position involves configuring, customizing, and maintaining the Splunk infrastructure to ensure it meets the organization’s needs for data analysis, security, and operational intelligence. By harnessing the capabilities of Splunk, these engineers play an integral role in enabling companies to make data-driven decisions, improve operational efficiency, and enhance security measures. Their expertise ensures that the platform is not only running smoothly but also leveraged to its full potential, providing valuable insights that support various departments within the organization.

· On-site support adhere to customer working hours (example 9am-6pm, 8 hours a day) and provide standby support after office hours when that is critical issue require support.

· Design, implement, and manage Splunk architecture, including deployment, configuration, and maintenance of Splunk Enterprise instances across various environments.

• Develop and customize Splunk apps and dashboards to meet specific organizational needs, integrating data feeds and creating visualizations for actionable insights.

• Write advanced Splunk Search Processing Language (SPL) queries for data analysis, reporting, and alerting purposes to support operational and security use cases.

• Optimize Splunk data ingestion and storage, ensuring efficient parsing, indexing, and searching capabilities, while managing data retention policies and data lifecycle.

• Implement and maintain Splunk data models and knowledge objects (e.g., event types, tags, aliases, lookups) to improve data normalization and correlation.

• Configure and manage Splunk Forwarders (Universal or Heavy) for data collection, aggregation, and forwarding, ensuring secure and reliable data transmission.

• Integrate Splunk with third-party tools and platforms (e.g., ticketing systems, SIEM, network monitoring tools) using APIs for automated incident response and data enrichment.

Conduct performance tuning and capacity planning activities for Splunk environments, including monitoring system health, identifying bottlenecks, and scaling resources to meet demand.

Requirements

• A fast learner with a Bachelor Degree in Computer Science, Information Technology, Network, or related disciplines

• Minimum of 2 years’ working experience in IT/Broadcast with experience in endpoint OS (e.g., Windows 10, Windows 11)

• Familiar with IT operation and IT equipment’s basic troubleshooting.

• Familiar with Splunk solution and software.

• Experience in managing Splunk system issue, issue escalation process, managing complex Severity issue is an added advantage.

• Able to understand failure mechanisms of complex computer based systems.

• Effectively apply communication skills to build and maintain internal relationships.

• Must be willing to work on irregular hours or on weekends to complete critical assignments.

• Able to work effectively under pressure.

• Highly Passionate to Make Things Happen

Job Types: Full-time, Contract, Freelance
Contract length: 12 months

Pay: Up to RM10,000.00 per month