Job Information
IBM Splunk Admin in Bucharest, Romania
Introduction
Your role and responsibilities
Splunk Admin activities to perform:
Install and configure Splunk components
Perform tests
Support to Client security accreditation process and related activities
Perform tests and implement remediation when needed
Write documentation (detailed design, test cases, test report, operational handbooks)
Perform deployment to production and assist to hypercare
Provide advice to the Solution Architecture team
Define Tier 2 systems onboarding strategy (via ACPV Enclaves)
Create enclave design template per enclave type
Create and document detailed design for Splunk components as part ACPV enclaves (105 enclaves to be designed & deployed)
Splunk component set up per Enclave
Integration with Splunk core components
Required technical and professional expertise
Good knowledge of Splunk products in scope: Splunk Enterprise, Splunk IT Service Intelligence, Splunk Enterprise Security
Hands-on experience (at least 2 years) with the configuration, build and deployment of Splunk solutions
Good knowledge of endpoint security (hardening, patching, vulnerability management)
Good knowledge of network security
General cybersecurity knowledge
Disciplined execution of procedures
Experience with Splunk as an observability solution is a bonus
Communication skills : Good knowledge of English verbally & written
IBM is committed to creating a diverse environment and is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, caste, genetics, pregnancy, disability, neurodivergence, age, veteran status, or other characteristics. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.