Responsible for the architecture, administration, and maintenance of the Splunk Enterprise and Splunk Enterprise Security platforms. Handle requests from partner IT teams for implementation and changes as required. Partner closely with partner teams for data onboarding, alerting, and knowledge object creation. Be the primary point of contact for incidents regarding the Splunk platform. Responsible for technical document creation and knowledge sharing across Enterprise Monitoring Team and other partner IT teams. Ensure training is provided and stakeholders are informed. Perform on-call duties as required. Set up, administer and maintain protocols for enterprise-wide log and event management. Set up, administer, and maintain Splunk Infrastructure and Configurations Design and implement solutions to address new use cases or data collection needs. Provide consultation to Splunk user base on best practices, and guidance and assistance creating and maintaining knowledge objects. Integrate Splunk with other platforms. Configure the monitoring of critical systems via Splunk. Manage the performance of the Splunk platform. Correlate disparate events from monitoring platforms. Create and author technical documentation for both internal team consumption as well as user-base consumption. May work remotely pursuant to First Citizens' Remote Work Guidelines policy.

The base pay for this position is relative to your experience but the range is generally $123,300 - $150,100 per year. The position is eligible for variable compensation, which may be in the form of incentive, bonus, or commission pay. First Citizens offers a competitive, comprehensive benefits program which you can review here: https://jobs.firstcitizens.com/benefits.

Position requires a Bachelor's degree in Information Systems, Computer Science, or a related field of study plus six (6) years of experience in the job offered or six (6) years of experience as a Systems Programmer, Software Developer, SQL Database Administrator, or a related occupation. Alternatively, the employer will accept a High School Diploma/GED plus eight (8) years of experience in the job offered or eight (8) years of experience as a Systems Programmer, Software Developer, SQL Database Administrator, or a related occupation.

Requires experience in Splunk implementation and maintenance in a mid-large scale cross-functional organization supporting enterprise security, networking, infrastructure, and applications. Requires experience with multi-site environments and data administration. Requires experience scaling and migrating Splunk components such as indexers and search heads. Requires strong knowledge of the Splunk CLI and configuration management via conf files, API development (REST or JSON), Linux Servers (Rhel 7 or higher), and Syslog (rsyslog or syslog-ng). May work remotely pursuant to First Citizens' Remote Work Guidelines policy.

To Apply: Go to https://jobs.firstcitizens.com/jobs and submit your resume to Job # 22608. #EJC #LI-DNI