MetLife

Position Summary

We are seeking a forward-thinking and enthusiastic Engineering and Operations Specialist to manage and optimize our Splunk platforms. The ideal candidate will have in-depth experience in at least one of these technologies, with a preference for experience in MongoDB and other database is plus

Job Responsibilities

• Worked with engineering and operational tasks for Splunk platforms, ensuring high availability and stability.
• Continuously improving the stability of the environment, leveraging automation, self-healing mechanisms.
• Develop and implement automation using technologies such as Ansible, Python, Shell.
• Install, configure, and maintain Splunk applications, indexers, search heads, and forwarders.
• Optimize search queries, configure data retention policies, and manage Splunk indexer storage to ensure optimal performance and resource utilization.
• Maintain and improve Splunk dashboard functionality and visualization for the Information Security department.
• Implement and maintain Splunk platform infrastructure and configuration.
• Develop reliable, efficient queries, summary indexes, and data models that will feed custom alerts and dashboards.
• Use and create dashboards and apps for platform auditing functions.
• Manage Apps/Dashboards for license usage and Application errors.
• Implements and maintains Splunk platform infrastructure and configuration
• Monitor the Splunk infrastructure for capacity planning and optimization.
• Maintain uniform Splunk dashboards across the organization.
• Migrate Splunk dashboards from superseded versions to current versions.
• Perform after-the-fact investigations utilizing Splunk capabilities.
• Ensure data quality is in line with the use cases and maintain current functional and technical knowledge of the Splunk platform.
• Mentor and guide other team members to understand the use case of Splunk.
• Provide regular support and guidance to a variety of teams on complex solutions and issue resolutions.
• Lead Proof-of-Concepts on Splunk implementation.
• Monitor and tune Splunk to optimize performance, identifying bottlenecks and troubleshooting issues.
• Analyze database queries, indexing, and storage to ensure minimal latency and maximum throughput.
•  Splunk System Administrator will build, maintain, and standardize the Splunk platform, including forwarder deployment, configuration, dashboards, and maintenance across Linux OS.
• Perform application administration for a single security information management system.
• Other related functions as assigned.
• Able to debug production issues by analyzing the logs directly and using tools like Splunk. 
• Work in Agile model with the understanding of Agile concepts and Azure DevOps.
• Learn new technologies based on demand and help team members by coaching and assisting. 

Education, Technical Skills & Other Critical Requirement

Education

Bachelor’s degree in computer science, Information Systems, or another related field with 10+ years of IT and Infrastructure engineering work experience.

•  Splunk Certified Administrator is a plus
• Experience with cloud platforms like AWS, Azure, or Google Cloud.

Experience 

(In Years)

10+ Years Total IT experience & 7+ Years relevant experience in Splunk Administrator

Technical Skills

Other Critical Requirements 

• Strong problem-solving abilities and a proactive approach to identifying and resolving issues.
• Excellent communication and collaboration skills.
• Ability to work in a fast-paced environment and manage multiple priorities effectively.
• Must have Leadership experience.