Ayan Infotech are urgently looking for a Senior Splunk Consultant for a long term (12+ months) or a full-time permanent job opportunity in Melbourne (Sydney can be considered as work location too).

All applicants must have full unrestricted work rights in Australia.

**Title: Senior Splunk Consultant

Type: Contract (12+ months) OR permanent

Location: Melbourne preferred, Sydney okay too

Nature of work: Hybrid (2-3 days in office in a week)

Required Skills and Experience:**

Here are some of the areas that are key to being successful in the role

- Splunk Administration
- Splunk Enterprise & Splunk Cloud
- Splunk Data Onboarding
- SPL Query Development & Optimization
- CIM / Data Governance / RBAC
- Field Extraction / Parsing / REGEX (Part of Splunk Data Onboarding)
- props.conf / transforms.conf: (Part of Splunk Data Onboarding)
- Splunk Indexer Cluster & SHC Administration
- Forwarders / Deployment Server Management
- Splunk Cloud Migration
- Technical Add-ons (TA) Installation & Configuration
- Hybrid Splunk Architecture
- Security Log Onboarding & Compliance
- Python Scripting
- Elastic Stack (Elasticsearch, Kibana, Fleet
- Dynatrace / AppDynamics Monitoring
- CI/CD Pipelines (Git, Ansible)




- Linux & Networking Basics
- Agile / Jira / ServiceNow

Essential Skills:

- 8-10 years experience with Splunk administration and data onboarding (or equivalent depth).
- Strong practical knowledge of:
- CIM normalization, tags/eventtypes, datamodel alignment
- Field extraction (regex, JSON/KV extraction), and troubleshooting parsing issues
- props.conf / transforms.conf, sourcetypes, timestamps, line-breaking
- TA installation/configuration and deployment patterns across Splunk tiers

- Experience with complex Splunk architectures:

- Indexer clusters, SH/SHC, forwarder management, deployment server
- Hybrid patterns (on-prem + cloud), connectivity, and ingestion strategies

- Comfortable writing and validating SPL for data quality and CIM compliance.
- Robust log source knowledge across common domains:

- Security: EDR, firewall, proxy, IAM/auth, VPN, email security
- Infrastructure: Windows, Linux, network devices, virtualization
- Cloud: AWS/Azure/GCP logging patterns (nice-to-have)

Contact: [02 9412 4178](tel:02 9412 4178) for more details. www.ayaninfotech.com

📌 Senior Splunk Consultant - Melbourne
🏢 AYAN INFOTECH
📍 Melbourne