Cdm Splunk Engineer Resume
4.00/5 (Submit Your Rating)
SUMMARY
- 8+ years of combined IT experience. Result - oriented Splunk Developer & Administrator possessing extensive knowledge of Splunk Architecture including components such as indexer, search head, forwarder, deployment server, etc.
- Highly skilled in conceptualizing and developing software/applications & Business Intelligence Solutions to drive business transformation.
- Proficient in facilitating sound decision-making for senior leadership/management, deploying Splunk enterprise, core, cloud, and for delivering compelling business value to clients & successfully executing projects.
TECHNICAL SKILLS
- Monitoring and Performance tuning
- Database Upgrade and Migration
- Data modeling
- Incident Management
- Splunk Architecture
- Business Intelligence solution
- Application Design & Development
- User Management
- Software Analysis
- Database Management
- Data Warehousing
- Database Application Development
- Operational Intelligence
- Linux O/S installation from scratch on VMware work station
- Shell scripting
- Window 2012 installation on Linux
- Splunk implementation on cloud/AWS and Microsoft Azure
- Implement single site clustering on Linux 0/S and AWS
PROFESSIONAL EXPERIENCE
CDM Splunk Engineer
Confidential
Responsibilities:
- Implementation of Splunk Architecture for CDM Solution
- Work with team for Sprint planning of CDM and all agencies involved (DOL, OCIO, OIG, DOD, BLS)
- Troubleshoot and monitor data flow/quality from tools such as ForeScout, BigFix, and Tenable which were ingested into Splunk using Python scripts
- Work with client to create dashboards and resolve technical issues
- Deploy CDM applications and add-ons in Splunk
- Create knowledge objects to improve sensitivity in CDM tools which were sending data into Splunk
- Implement Indexer cluster architecture for all agencies involved in the CDM program
- Work closely with developers to patch, upgrade, and make changes in Splunk Python scripts at the baseline level
- Develop use cases, data models, and connectors within Splunk to help meet overall program objectives
- Leverage expertise with Splunk Search Language (SPL) to develop network or endpoint-based anomaly detection alerting logic in SPL and build dashboards for visualization
- Design, install, analyze, evaluate, test, and debug Splunk based on current project needs
- Provide tier 3 support to Splunk incidents that are related to infrastructure ops
- Improve the Splunk deployments for each customer while integrating new tech and services
- Implement of Splunk Indexer cluster for high availability scalability on AWS EC2 Console.
Splunk Admin
Confidential
Responsibilities:
- Provide recommendations and implement changes to optimize Splunk products in the customer environment
- Normalizing data through CIM compliance process
- Utilize the Management Console to investigate resource usage
- Configured license pooling
- Troubleshooting Splunk feed issues and data ingestion for remote locations
- Deployed new Splunk architecture at disaster recovery site.
- Configure hot, warm and cold buckets hold data for extended periods of time
- Install and configure systems which support infrastructure and/or activities.
- Working with security team to understand use cases for splunk.
- Perform regular security monitoring to identify any possible intrusions.
- Create, change, and delete user accounts per request as necessary.
- Maintain operational, configuration, or other procedures.