Splunk Administrator - Hybrid

Locations: Alpharetta, GA; Charlotte, NC; Chicago, IL; Conshohocken, PA; Denver, CO; Fargo, ND; Garden City, NY; Houston, TX; Lubbock, TX; Morristown, NJ; Mt Juliet, TN; New York, NY; Purchase, NY; Topeka, KS

• 5 years of hands on experience administering Splunk in an enterprise environment.
• Splunk Cloud and on prem Splunk infrastructure, including Heavy Forwarders, Deployment Server, and Universal Forwarders.
• HTTP Event Collector
• Common Splunk Technology Add ons, including Azure, Okta, and other cloud services.
• Splunk data models and data normalization practices.
• Splunk features such as alert actions, SAML based authentication, KV store, and lookups.
• Splunk role based access controls and permission models.
• Data management features including DDAS and reindexing processes.
• Azure Event Hubs, Kafka, Log Analytics Workspaces, and cloud based logging pipelines.
• Windows Event Collection and Windows Event Forwarding