Senior Splunk Technical Specialist

Technical Specialist-Testing Services

Area(s) of responsibility

�� Job Description

We are seeking an experienced Splunk SME with strong expertise in Splunk Development, Administration, and Platform Optimization. The ideal candidate will have proven hands‑on experience with search optimization, index usage governance, performance tuning, and cost optimization across large-scale Splunk environments.

✔ Key Responsibilities

Splunk Dashboard & Query Optimization

• Identify and catalogue all Splunk dashboards across applications; perform cleanup of unused dashboards.
• Analyze and optimize heavy or slow-running SPL queries to improve performance and reduce resource consumption.
• Review, refactor, and publish standardized optimized SPL queries for enterprise‑wide usage.

Splunk Index, Cost & Access Governance

• Track index-level usage, user access patterns, and correlate consumption with Splunk license & storage cost.
• Maintain visibility into Users vs Cost to drive optimization recommendations.
• Support 80–100 Splunk indexes and coordinate with 300+ users.

Ingestion & Platform Optimization

• Evaluate and optimize data ingest rates, sourcetypes, and parsing strategies to reduce license cost.
• Apply best practices for data onboarding, retention, and indexing strategy aligned with cost and performance goals.

GenAI Integration

• Explore and apply GenAI‑based optimizations to SPL generation, dashboard improvements, anomaly detection, and operational efficiency.
• Use LLM‑based tools to accelerate triage, query tuning, documentation, and process automation.

Collaboration & Continuous Improvement

• Partner with multi-functional teams, including Dev, Test, Support, Business teams, to ensure consistent and optimized Splunk usage.
• Conduct knowledge‑sharing sessions to educate and mentor teams on optimization best practices.
• Provide guidance on Splunk management for cross-functional stakeholders.

Automation

• Develop automation scripts and workflows using Python, Shell, or REST APIs to identify and eliminate unused dashboards, saved searches, and stale knowledge objects.
• Automate detection of ingest spikes, redundant log sources, and high‑cost sourcetypes to help reduce Splunk license usage.
• Implement automated report generation for index usage, ingest cost, and user access analytics.
• Build automated governance routines to enforce ingest controls, retention adjustments, and object lifecycle management.

 

Experience Level

Senior Level