Splunk Administration

• Install, configure, and maintain Splunk Enterprise and Splunk Cloud environments.
• Manage Splunk Indexers, Search Heads, Forwarders, Deployment Servers, and Clusters.
• Develop and maintain dashboards, reports, alerts, and monitoring solutions.
• Configure log ingestion from servers, applications, network devices, and cloud platforms.
• Optimize Splunk performance, retention policies, and indexing strategies.
• Perform troubleshooting and root cause analysis of Splunk platform issues.
• Support security monitoring, threat detection, and compliance reporting requirements.
• Design and implement Splunk use cases for operational and security monitoring.
• Work with infrastructure and security teams to onboard new data sources.

Microsoft 365 Administration

• Administer Microsoft 365 tenant, including Exchange Online, Teams, SharePoint Online, OneDrive, and Microsoft Purview.
• Manage user provisioning, licensing, groups, and role assignments through Microsoft Entra ID (Azure AD).
• Configure and support Microsoft Teams policies, calling, meetings, and collaboration services.
• Administer Exchange Online mailboxes, mail flow, distribution groups, and hybrid configurations.
• Manage SharePoint Online sites, permissions, and document management solutions.
• Monitor service health and proactively address performance or availability issues.
• Support Microsoft Defender and security compliance initiatives.
• Implement data retention, DLP, eDiscovery, and governance policies.
• Coordinate tenant migrations, upgrades, and adoption initiatives.

Security & Compliance

• Ensure adherence to security standards and compliance requirements.
• Support identity and access management using Entra ID and Conditional Access.
• Configure MFA, SSO, and security policies for Microsoft 365 services.
• Monitor and investigate security alerts from Splunk and Microsoft Security tools.
• Participate in security audits and remediation activities.

Operations & Support

• Support Incident, Problem, Change, and Request Management processes.
• Troubleshoot complex infrastructure and application issues.
• Create and maintain operational documentation and knowledge articles.
• Participate in on-call and after-hours support activities as required.
• Collaborate with cross-functional teams to ensure service availability and customer satisfaction.

• Experience 5-8 Years

• 
  Splunk
• Splunk Enterprise
• Splunk Cloud
• Splunk Enterprise Security (ES)
• Splunk ITSI (preferred)
• Universal Forwarders
• Search Processing Language (SPL)
• Dashboard Development
• Log Management & Monitoring
• Data Onboarding & Parsing
• Alerting & Reporting
• Microsoft 365
• Exchange Online
• Microsoft Teams
• SharePoint Online
• OneDrive for Business
• Microsoft Entra ID (Azure AD)
• Microsoft Defender
• Microsoft Purview
• Intune (preferred)
• Power Platform (preferred)
• Identity & Security
• SSO
• MFA
• Conditional Access
• RBAC
• Zero Trust Security
• Identity Governance
• Operating Systems & Scripting
• Windows Server Administration
• Linux Administration
• PowerShell
• Basic Python or scripting knowledge
• ITSM & Monitoring
• ServiceNow
• ITIL Processes
• Monitoring & Alerting Platforms