Ayan Infotech are urgently looking for a Senior Splunk Consultant for a long term (12+ months) or a full-time permanent job opportunity in Melbourne (Sydney can be considered as work location too). All applicants must have full unrestricted work rights in Australia.

Title: Senior Splunk Consultant

Type: Contract (12+ months) OR permanent

Location: Melbourne preferred, Sydney okay too

Nature of work: Hybrid (2-3 days in office in a week) Required Skills and Experience: Here are some of the areas that are key to being successful in the role - Splunk Administration

- Splunk Enterprise & Splunk Cloud
- Splunk Data Onboarding
- SPL Query Development & Optimization
- CIM / Data Governance / RBAC
- Field Extraction / Parsing / REGEX (Part of Splunk Data Onboarding)
- props.conf / transforms.conf: (Part of Splunk Data Onboarding)
- Splunk Indexer Cluster & SHC Administration
- Forwarders / Deployment Server Management
- Splunk Cloud Migration
- Technical Add-ons (TA) Installation & Configuration
- Hybrid Splunk Architecture
- Security Log Onboarding & Compliance
- Python Scripting
- Elastic Stack (Elasticsearch, Kibana, Fleet
- Dynatrace / AppDynamics Monitoring
- CI/CD Pipelines (Git, Ansible)




- Linux & Networking Basics
- Agile / Jira / ServiceNow Essential Skills:
- 8-10 years experience with Splunk administration and data onboarding (or equivalent depth).
- Robust practical knowledge of:
- CIM normalization, tags/eventtypes, datamodel alignment - Field extraction (regex, JSON/KV extraction), and troubleshooting parsing issues - props.conf / transforms.conf, sourcetypes, timestamps, line-breaking - TA installation/configuration and deployment patterns across Splunk tiers - Experience with complex Splunk architectures:
- Indexer clusters, SH/SHC, forwarder management, deployment server - Hybrid patterns (on-prem + cloud), connectivity, and ingestion strategies - Comfortable writing and validating SPL for data quality and CIM compliance.
- Strong log source knowledge across common domains:
- Security: EDR, firewall, proxy, IAM/auth, VPN, email security - Infrastructure: Windows, Linux, network devices, virtualization - Cloud: AWS/Azure/GCP logging patterns (nice-to-have) Contact: 02 9412 4178 for more details.

www.ayaninfotech.com

📌 Senior Splunk Consultant - Melbourne
🏢 AYAN INFOTECH
📍 Melbourne