Splunk Architect

This is a remote position. Location: Remote / Hybrid (as required by project) Australia based Contract Duration: 2-3 months (extendable) Rate: Competitive, based on experience Role Summary: The Splunk Architect will be responsible for designing, optimising, and implementing Splunk-based solutions to enhance log management, security monitoring, and operational intelligence. The role will require deep expertise in Splunk architecture, data ingestion strategies, and SIEM integration, ensuring a scalable and cost-effective logging strategy. Data ingest optimisation skills are essential. You must be based in Australia and pass police clearance. Key Responsibilities: • Identify data optimisation opportunities in data pipelines to ensure cost-effective data storage and retrieval. • Work closely with security teams and stakeholders to develop logging strategies aligned with compliance and security needs. • Lead the implementation of data filtering, indexing strategies, and storage optimisations. • Integrate Splunk with other data sources and security tools to support threat detection and incident response. • Provide recommendations for Splunk licensing optimisation and cost reduction. • Design and implement Splunk architectures to support log ingestion, processing, and analysis at scale. • Develop and document Splunk architecture, best practices, and operational runbooks. • Lead troubleshooting efforts for performance and ingestion issues. • Evaluate and implement Splunk add-ons such as Splunk DMX and Cribl to improve data processing. • Lead a small team to implement optimisations and other tasks​ Requirements Required Skills & Experience: • 5+ years of experience in designing and implementing Splunk architectures. • Strong understanding of Splunk Cloud, Splunk Enterprise Security (ES), and log management best practices. • Hands-on experience with Splunk data ingestion, parsing, and indexing. • Expertise in data modelling, CIM compliance, and SIEM integrations. • Experience with AWS, Azure, or other cloud environments. • Familiarity with log pipeline tools such as Cribl or Splunk DMX. • Knowledge of scripting languages (Python, Bash, PowerShell) for automation. • Strong problem-solving and communication skills. • You must be based in Australia and pass police clearance.​ Benefits • Competitive Contract Rates: Get paid well for your expertise and contributions. • Remote & Hybrid Flexibility: Work from anywhere or engage on-site as needed. • Challenging & Impactful Work: Be a part of high-impact projects optimising security and logging strategies. • Short-Term with Potential Extensions: Ideal for professionals looking for flexible, extendable contracts. • Hands-on Exposure to Cutting-Edge Tech: Work with tools like Splunk Cloud, Cribl, Splunk DMX, and AWS/Azure environments. • Collaboration with Experts: Join a team of experienced professionals in security operations and data analytics. • Opportunities for Skill Enhancement: Learn from industry-leading experts and enhance your Splunk expertise. • Future Opportunities: Successful contributions could lead to longer-term engagements and additional contracts. • Innovative Work Environment: Work in a forward-thinking team that encourages creativity and problem-solving. • Professional Growth: Engage in projects that enhance your resume and keep you at the forefront of industry developments. • Work-Life Balance: Flexible working hours that allow you to maintain a balanced professional and personal life. • Supportive Company Culture: Join an organisation that values its people, fosters a positive work environment, and supports career progression. • Exposure to Enterprise-Level Deployments: Gain hands-on experience in large-scale, enterprise security environments, working alongside industry leaders. • Network & Build Industry Connections: Work with experts and expand your professional network in the cybersecurity and observability fields. Originally posted on Himalayas