Splunk Architect
About this role
This is a remote position.
Location: Remote / Hybrid (as required by project) Australia based Contract Duration: 2-3 months (extendable) Rate: Competitive, based on experience
Role Summary:
The Splunk Architect will be responsible for designing, optimising, and implementing Splunk-based solutions to enhance log management, security monitoring, and operational intelligence. The role will require deep expertise in Splunk architecture, data ingestion strategies, and SIEM integration, ensuring a scalable and cost-effective logging strategy. Data ingest optimisation skills are essential. You must be based in Australia and pass police clearance.
Key Responsibilities:
Identify data optimisation opportunities in data pipelines to ensure cost-effective data storage and retrieval.
Work closely with security teams and stakeholders to develop logging strategies aligned with compliance and security needs.
Lead the implementation of data filtering, indexing strategies, and storage optimisations.
Integrate Splunk with other data sources and security tools to support threat detection and incident response.
Provide recommendations for Splunk licensing optimisation and cost reduction.
Design and implement Splunk architectures to support log ingestion, processing, and analysis at scale.
Develop and document Splunk architecture, best practices, and operational runbooks.
Lead troubleshooting efforts for performance and ingestion issues.
Evaluate and implement Splunk add-ons such as Splunk DMX and Cribl to improve data processing.
Lead a small team to implement optimisations and other tasks
Identify data optimisation opportunities in data pipelines to ensure cost-effective data storage and retrieval.
Work closely with security teams and stakeholders to develop logging strategies aligned with compliance and security needs.
Lead the implementation of data filtering, indexing strategies, and storage optimisations.
Integrate Splunk with other data sources and security tools to support threat detection and incident response.
Provide recommendations for Splunk licensing optimisation and cost reduction.
Design and implement Splunk architectures to support log ingestion, processing, and analysis at scale.
Develop and document Splunk architecture, best practices, and operational runbooks.
Lead troubleshooting efforts for performance and ingestion issues.
Evaluate and implement Splunk add-ons such as Splunk DMX and Cribl to improve data processing.
Lead a small team to implement optimisations and other tasks
Requirements
Required Skills & Experience:
5+ years of experience in designing and implementing Splunk architectures.
Strong understanding of Splunk Cloud, Splunk Enterprise Security (ES), and log management best practices.
Hands-on experience with Splunk data ingestion, parsing, and indexing.
Expertise in data modelling, CIM compliance, and SIEM integrations.
Experience with AWS, Azure, or other cloud environments.
Familiarity with log pipeline tools such as Cribl or Splunk DMX.
Knowledge of scripting languages (Python, Bash, PowerShell) for automation.
Strong problem-solving and communication skills.
You must be based in Australia and pass police clearance.
5+ years of experience in designing and implementing Splunk architectures.
Strong understanding of Splunk Cloud, Splunk Enterprise Security (ES), and log management best practices.
Hands-on experience with Splunk data ingestion, parsing, and indexing.
Expertise in data modelling, CIM compliance, and SIEM integrations.
Experience with AWS, Azure, or other cloud environments.
Familiarity with log pipeline tools such as Cribl or Splunk DMX.
Knowledge of scripting languages (Python, Bash, PowerShell) for automation.
Strong problem-solving and communication skills.
You must be based in Australia and pass police clearance.
Benefits
Competitive Contract Rates:Get paid well for your expertise and contributions.
Remote & Hybrid Flexibility:Work from anywhere or engage on-site as needed.
Challenging & Impactful Work:Be a part of high-impact projects optimising security and logging strategies.
Short-Term with Potential Extensions:Ideal for professionals looking for flexible, extendable contracts.
Hands-on Exposure to Cutting-Edge Tech:Work with tools like Splunk Cloud, Cribl, Splunk DMX, and AWS/Azure environments.
Collaboration with Experts:Join a team of experienced professionals in security operations and data analytics.
Opportunities for Skill Enhancement:Learn from industry-leading experts and enhance your Splunk expertise.
Future Opportunities:Successful contributions could lead to longer-term engagements and additional contracts.
Innovative Work Environment:Work in a forward-thinking team that encourages creativity and problem-solving.
Professional Growth:Engage in projects that enhance your resume and keep you at the forefront of industry developments.
Work-Life Balance:Flexible working hours that allow you to maintain a balanced professional and personal life.
Supportive Company Culture:Join an organisation that values its people, fosters a positive work environment, and supports career progression.
Exposure to Enterprise-Level Deployments:Gain hands-on experience in large-scale, enterprise security environments, working alongside industry leaders.
Network & Build Industry Connections:Work with experts and expand your professional network in the cybersecurity and observability fields.
Originally posted on Himalayas
