Splunk Architect at emagine

Descrição da Função:

Últimas informações de emprego de emagine para o cargo de Splunk Architect. If the Splunk Architect vaga em Portalegre corresponde às suas qualificações, submeta a sua candidatura ou CV atualizado diretamente através do portal Jobkos.

Tenha em atenção que candidatar-se a um emprego exige o cumprimento de requisitos da empresa. Esperamos que a oportunidade em emagine para o cargo de Splunk Architect abaixo seja adequada ao seu perfil.

Overview

We are seeking an experienced Senior Splunk Engineer to operate and enhance a large-scale on-premise SIEM platform. As part of a transition from Infosys, you will take ownership of stabilizing and continuously improving an enterprise environment.

You will lead all Splunk operations across planning, implementation, 24/7 support, release management, log onboarding (CIM-based), parser development, hardening, configuration management, and incident/problem/change processes.

Current Platform Landscape

• 50+ Cribl Workers
• 10+ Universal/Heavy Forwarders
• Indexers & Management Components
• Search Heads & Load Balancers

Responsibilities

1) Plan & Build

• Perform CIM-compliant log onboarding, parser development, and documentation
• Conduct onboarding due diligence and demand analysis
• Create and validate Firewall/VPN/Routing change requests
• Manage ingestion pipelines (Cribl, Syslog-ng TLS, UF/HF, SCP)
• Deploy and scale platform components using Terraform and Ansible
• Perform trend and capacity analysis

2) Operations (Enterprise 24/7)

• Ensure full platform monitoring, performance, EPS/log flow
• Manage incidents, service requests, problems, and changes under enterprise ITSM
• Lead Major Incident Management (P1/P2) with on-call rotation
• Build health dashboards and QA reports

3) Configuration & Release Management

• Implement approved configuration changes
• Perform daily backups (KV stores, apps, configs)
• Maintain automation libraries (Terraform, Ansible, scripts)
• Manage patching and releases (maintain N-1 level)
• Support up to 12 minor + 1 major release per year

4) Security, Hardening & Compliance

• Execute system hardening and vulnerability remediation
• Work via secure access methods (jump hosts, secure shells, MFA)
• Run vulnerability scans and support SOC threat analysis
• Automate SOP-driven operational workflows

5) Transition Ownership

• Take over existing platform operations
• Validate and optimize current configurations, parsers, and deployments
• Ensure stability throughout transition and hypercare phase

Requirements

Technical

• 5–10 years SIEM/Splunk experience in large enterprises
• Strong architecture knowledge, CIM onboarding, parser development, certificates
• Scripting skills (Terraform, Ansible, Bash and/or Python)
• Proven experience stabilizing existing SIEM platforms

Certifications (minimum two required)

• Splunk Core Certified User
• Splunk Core Certified Power User
• Splunk Enterprise Admin
• Splunk Enterprise Architect
• (Optional) Splunk ES

Soft Skills

• Strong enterprise communication
• Excellent documentation abilities
• Proactive, quality-driven mindset
• Fluent English (German is a plus)

What We Offer

• Work on a cutting-edge enterprise SIEM platform
• High responsibility within cybersecurity operations
• Long-term engagement (24–36 months)
• International collaboration environment

Informação da Vaga:

• Empresa: emagine
• Cargo: Splunk Architect
• Local de Trabalho: Portalegre
• País: PT

Como enviar a sua candidatura:

Após ler e compreender os critérios e requisitos mínimos explicados na informação da vaga Splunk Architect at the office Portalegre acima, prepare de imediato os documentos de candidatura, tais como carta de apresentação, CV, cópia do diploma e outros anexos. Envie através do link 'Próxima Página' abaixo.