Splunk Architect

Ellington Solutions is seeking out qualified candidates that will:

• Execute the responsibilities of a Splunk administrator and architect.
• Comprehensively design and develop a Splunk enterprise environment.
• Have experience in the design, architecture, and deployment of multi-site clustering.
• Possess knowledge of Splunk validated design frameworks.
• Oversee substantial Splunk deployments of 30+TB.
• Utilize both on-premise and cloud-based architectures.
• Experience with ingesting, SVC, and predictive licensing.
• Grasp the concepts of SVC cloud models.
• Have a solid understanding of search, indexer, and forwarding tiers.
• Familiarity with smart store and traditional frameworks.
• Knowledgeable in optimizing Splunk architecture for performance.
• Understand the differences between Splunk cloud SaaS and hybrid models.
• Experience in optimizing traffic flows to Splunk in both on-premise and cloud environments.
• Capable of creating custom parsers.
• Possess a working knowledge of Splunk knowledge objects.
• Able to implement high availability for Cluster Managers and indexer clusters.
• Capable of establishing high availability for Deployment Servers.
• Experienced in search head clustering.
• Knowledgeable about site0 architecture.
• Understand search affinity concepts.
• Familiar with cluster management practices.
• Comprehend SF/RF configurations in both single-site and multi-site environments.
• Able to see projects through to completion.

The qualified candidate will have:

• U.S. Citizenship (Required)
• A minimum of Secret Clearance (Required)
• More than 8 years of experience in designing and implementing large-scale Splunk architectures
• Experience in strategizing comprehensive Splunk deployments
• Expertise in documenting extensive Splunk implementations
• Adept at designing and architecting major Splunk deployments
• Excellent verbal and written communication skills
• Proficient in delivering effective presentations