We are seeking a skilled and proactive Splunk Sr. Consultant to join our SRE and Observability CoE team. This role will be responsible for the implementation, optimization, and maintenance of Splunk platforms across enterprise and cloud-native environments. The ideal candidate will have deep hands-on experience in Splunk Core (Enterprise/Cloud), SPL (Search Processing Language), and optionally Splunk Observability Suite (SignalFx, APM, RUM, Log Observer). Key Responsibilities Platform Engineering & Administration Install, configure, and maintain Splunk Enterprise or Splunk Cloud environments Manage indexers, forwarders, deployment servers, and heavy forwarders Architect and manage data ingestion pipelines from varied sources (syslogs, apps, databases, cloud services) Search, Dashboards & Reports Design and implement SPL queries, alerts, dashboards, and scheduled reports Develop reusable visualization templates and KPIs for operational teams Customize dashboards for Infrastructure, Security, and Application Observability Observability & Monitoring Integrate and configure Splunk Observability Cloud components: Infrastructure Monitoring (SignalFx) APM and Real User Monitoring (RUM) Log Observer / Explorer Develop detectors, charts, and alert rules for cloud-native workloads (Kubernetes, AWS, GCP, Azure) Integration & Automation Integrate Splunk with DevOps tools (CI/CD, Terraform, Jenkins, Ansible) for automated telemetry enablement Support custom source integration using Python, REST APIs, or OpenTelemetry Incident & Root Cause Analysis Work with SRE, NOC, and application teams to perform correlated triaging using logs, metrics, and traces Enable root cause analysis and performance insights from Splunk data Security, Compliance & Best Practices Implement data governance, retention, and masking policies Ensure platform meets security and compliance requirements (SOC2, HIPAA, etc.) Document standard operating procedures (SOPs), onboarding guides, and troubleshooting runbooks