Job Description

Ayan Infotech are urgently looking for a Senior Splunk Consultant for a long term (12+ months) or a full-time permanent job prospect in Melbourne (Sydney can be considered as work location too).

n

All applicants must have full unrestricted work rights in Australia.

n

Title: Senior Splunk Consultant
n Type: Contract (12+ months) OR permanent
n Location: Melbourne preferred, Sydney okay too
n Nature of work: Hybrid (2-3 days in office in a week)
n Required Skills and Experience:

n

Here are some of the areas that are key to being successful in the role

n

n
- Splunk Administration
n
- Splunk Enterprise & Splunk Cloud
n
- Splunk Data Onboarding
n
- SPL Query Development & Optimization
n
- CIM / Data Governance / RBAC
n
- Field Extraction / Parsing / REGEX (Part of Splunk Data Onboarding)
n
- props.conf / transforms.conf: (Part of Splunk Data Onboarding)
n
- Splunk Indexer Cluster & SHC Administration
n
- Forwarders / Deployment Server Management
n
- Splunk Cloud Migration
n
- Technical Add-ons (TA) Installation & Configuration
n
- Hybrid Splunk Architecture
n
- Security Log Onboarding & Compliance
n
- Python Scripting
n
- Elastic Stack (Elasticsearch, Kibana, Fleet
n
- Dynatrace / AppDynamics Monitoring
n
- CI/CD Pipelines (Git, Ansible)
n




- Linux & Networking Basics
n
- Agile / Jira / ServiceNow
n

n

Essential Skills:

n

n
- 8-10 years experience with Splunk administration and data onboarding (or equivalent depth).
n
- Strong practical knowledge of:n n
- CIM normalization, tags/eventtypes, datamodel alignment
n
- Field extraction (regex, JSON/KV extraction), and troubleshooting parsing issues
n
- props.conf / transforms.conf, sourcetypes, timestamps, line-breaking
n
- TA installation/configuration and deployment patterns across Splunk tiers
n

n
- Experience with complex Splunk architectures:n

n
- Indexer clusters, SH/SHC, forwarder management, deployment server
n
- Hybrid patterns (on-prem + cloud), connectivity, and ingestion strategies
n

n
- Comfortable writing and validating SPL for data quality and CIM compliance.
n
- Strong log source knowledge across common domains:n

n
- Security: EDR, firewall, proxy, IAM/auth, VPN, email security
n
- Infrastructure: Windows, Linux, network devices, virtualization
n
- Cloud: AWS/Azure/GCP logging patterns (nice-to-have)
n

n

n

Contact: 02 9412 4178 for more details.
n www.ayaninfotech.com

n

#J-18808-Ljbffr

📌 Senior Splunk Consultant - Melbourne (Victoria)
🏢 AYAN INFOTECH
📍 Victoria