Deloitte - Splunk Architect - SIEM

Role & responsibilities : - Overall experience 6-10 years, including SIEM Splunk Enterprise Security administrator, Splunk Enterprise, Splunk Enterprise Security and Splunk ITSI.- Experience in managing, supporting, deploying and documenting monitoring solutions.- Experience with Splunk data, use case, deployment, Splunk reporting, Splunk knowledge objects, Splunk searching & optimization, and knowledge of OpenSearch and migration from Splunk to OpenSearch.- Excellent communication and analytical skills with ability to present technical details to the stakeholders in technical and non-technical backgrounds.- Very good experience in migration of Splunk indices and dashboards to OpenSearch/ElasticSearch.- Experience administering and/or developing for an enterprise level implementation of Splunk and OpenSearch (clustered architecture).- Education : Bachelors degree in information security, Computer Science, or a related field, and a masters in business management is preferred.Preferred candidate profile : - Resource will be responsible for End2End Splunk Infrastructure Migration from Physical to Virtual.- Deploy, Configure, & Manage Splunk Infrastructure (Indexers, Forwarders, Search Heads, Clustering etc.).- Onboard & Parse New Data Sources into Splunk from Various Platforms (Linux, Windows, Cloud Services, Network Devices, etc.).- Create & Manage Splunk Knowledge Objects : Dashboards, Alerts, Reports, Saved Searches.- Manage User Roles, Authentication (e.g., LDAP, SSO), & Access Control. (ref:hirist.tech)