FirstBank Jobs

Job Description

This position is for our large enterprise software client. As a Splunk Ingest Engineer, you will be entrusted with the critical role of maintaining and expanding our Splunk infrastructure. Your day-to-day responsibilities will include health checks, maintenance, and deployment activities that are crucial for the seamless operation of our Splunk ecosystem.

Key Responsibilities:

• Perform daily health checks to ensure optimal performance and security of the deployed Splunk infrastructure.

Carry out routine maintenance activities, including:

• Applying OS patches and upgrades to ensure system integrity

• Upgrading Splunk Enterprise and associated apps, including Splunk Enterprise Security (ES)

• Managing SSL certificates for secure communications

• Conducting regular backups and restoration operations when necessary

Deploy new Splunk infrastructure and AWS services, involving:

• Scaling Splunk Indexer Cluster and Search Head Cluster

• Server resizing to meet operational demands

• Configuration of AWS resources such as S3 buckets, Load Balancers, Security Groups, and IAM Roles and Policies

Implement new Splunk configurations, including:

• Custom app development tailored to business requirements.

• Creation and management of indexes utilizing SmartStore technology.

Oversee the deployment and maintenance of log ingest mechanisms:

• Manage Universal Forwarders and Deployment Server operations.

• Configure props/transforms for data parsing and enrichment.

• Integrate HTTP Event Collector (HEC) for data ingestion.

• Monitor files, databases, and other data sources using tools like DB Connect and syslog/SC4S.

• Ensure log ingest processes are compliant with the Common Information Model (CIM) and facilitate Data Model Acceleration.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com .

To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/ .

Skills and Requirements

• 5+ years of experience with hands-on Splunk Administration and engineering

• 4+ years of experience with Log management and parsing strategies in Splunk

• Expert experience with data shaping and making sure that data is successfully ingested

• Any experience with Terraform or ansible for infrastructure as code

• Experience working in a Linux environment

• Experience deploying new Splunk infrastructure and AWS services - automation skills via IaC with Terraform or Ansible null

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion,sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military oruniformed service member status, or any other status or characteristic protected by applicable laws, regulations, andordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to HR@insightglobal.com.