Report this job

---

What is the problem? *

Incorrect company
Incorrect location
Job is expired
Job may be a scam
Other

Job Description:

1. looking for a Log management engineer.
2. The candidate will be responsible for log standardization and optimization.
3. Must have in depth knowledge of Splunk, Cribl, syslog, HEC, Azure Eventhub, AWS Kinesis, or simliar.
4. They must understand why is this log being ingested into Splunk and be able to apply data quality patterns and standards, python is the coding language
5. Combination of responding to tickets and new projects
6. Lots of automation based on analysis- self service, auto recovery, etc- want someone taking on new challenges

Manager notes:

1. Log management engineer- splunk experience-need someone who is at least familiar with WHY we are sending logs to splunk, why does a company CRIBL exist (ex splunk people), if can answer those things they aren't a robot, need people who understand cloud logs, things link eventhub in azure/aws kinesis or similar- or if they can tell me what problem they are solving that works too
2. Need to understand data- send 5 TB to splunk a day- need to analyze it determine whats waste, how can we improve, etc
3. Python is a plus- all splunk apps are written in python-been known to hack up and build their own, if they claim to know splunk really well they should know basic python (can know it enough to hack around, but can't build from scratch)
4. Nice to haves- good communication skills, be able to work with clients and help them- have both windows and linux- need someone who can interact with clients
5. 50/50 on prem/in cloud, leaning on prem but getting more in the cloud day by day
6. Very rare they are doing new build in old clouds
7. Need to be interacting with internal technical clients
8. Interview process- one or two people on a teams call, 30 mins max, sometimes can interview someone and will know- good ones go quick, discussion based questions, may ask a technical question or two, one and done
9. Need to be able to work on call- depending on role, splunk would never be woken up, but would be on call for 12 hours per week (after work), one week on one week off- bill on call- don't get bothered a whole ton but need to be available (maybe once a week)
10. With other vendors from the past would get resume that has every possible tech, screen out really long resumes- better be able to speak to their resumes