Ayan Infotech are urgently looking for a Senior Splunk Consultant for a long term (12+ months) or a full-time permanent job opportunity in Melbourne (Sydney can be considered as work location too).
All applicants must have full unrestricted work rights in Australia.
Title: Senior Splunk Consultant
Type: Contract (12+ months) OR permanent
Location: Melbourne preferred, Sydney okay too
Nature of work: Hybrid (2-3 days in office in a week)
Required Skills and Experience:
Here are some of the areas that are key to being successful in the role
- Splunk Administration
- Splunk Enterprise & Splunk Cloud
- Splunk Data Onboarding
- SPL Query Development & Optimization
- CIM / Data Governance / RBAC
- Field Extraction / Parsing / REGEX (Part of Splunk Data Onboarding)
- props.conf / transforms.conf: (Part of Splunk Data Onboarding)
- Splunk Indexer Cluster & SHC Administration
- Forwarders / Deployment Server Management
- Splunk Cloud Migration
- Technical Add-ons (TA) Installation & Configuration
- Hybrid Splunk Architecture
- Security Log Onboarding & Compliance
- Python Scripting
- Elastic Stack (Elasticsearch, Kibana, Fleet
- Dynatrace / AppDynamics Monitoring
- CI/CD Pipelines (Git, Ansible)
- Linux & Networking Basics
- Agile / Jira / ServiceNow
Essential Skills:
- 8-10 years experience with Splunk administration and data onboarding (or equivalent depth).
- Strong practical knowledge of:
- CIM normalization, tags/eventtypes, datamodel alignment
- Field extraction (regex, JSON/KV extraction), and troubleshooting parsing issues
- props.conf / transforms.conf, sourcetypes, timestamps, line-breaking
- TA installation/configuration and deployment patterns across Splunk tiers
- Experience with complex Splunk architectures:
- Indexer clusters, SH/SHC, forwarder management, deployment server
- Hybrid patterns (on-prem + cloud), connectivity, and ingestion strategies
- Comfortable writing and validating SPL for data quality and CIM compliance.
- Strong log source knowledge across common domains:
- Security: EDR, firewall, proxy, IAM/auth, VPN, email security
- Infrastructure: Windows, Linux, network devices, virtualization
- Cloud: AWS/Azure/GCP logging patterns (nice-to-have)
Contact: 02 9412 4178 for more details.
www.ayaninfotech.com
Senior Splunk Consultant - Melbourne employer: Ayan Infotech
Ayan Infotech is an exceptional employer that fosters a dynamic work culture in Brisbane, where innovation and collaboration thrive. Employees benefit from comprehensive professional development opportunities, competitive remuneration, and a supportive environment that encourages growth and transformation. With a focus on aligning client outcomes with cutting-edge technology, this role offers the chance to lead impactful projects while working alongside a diverse team of experts in the field.
