Security Data Platform Engineer Expert

• Develop, maintain, configure, and troubleshoot Data Platform tools to ensure optimal performance and reliability.
• Collaborate with stakeholders to gather requirements and implement successful data solutions.
• Act as a point of escalation during outages, providing expert troubleshooting and incident response.
• Mentor Operations staff to enhance their skills and understanding of data platform operations.
• Contribute to data hygiene and quality initiatives, aligning with the data strategy of the Data Platform.
• Construct new capabilities, enhance existing mechanisms, and provide comprehensive system documentation for future colleagues.

• Splunk Administration: Deep knowledge of Splunk administration, including index management, forwarder configuration, and deployment.
• Advanced Search and Reporting: Expertise in Splunk's search processing language (SPL) for advanced queries, reports, and dashboards.
• App Development: Experience in developing custom Splunk apps and integrations.
• Splunk Add-ons: Familiarity with Splunk add-ons and their configurations.
• Performance Tuning: Ability to optimize Splunk performance through indexing strategies, forwarder configurations, and hardware optimization.

• Cribl Stream: Proficiency in configuring and managing Cribl Stream for data routing, transformation, and optimization.
• Data Pipeline Management: Expertise in building and managing data pipelines using Cribl's processing capabilities.
• Transform and Filter: Advanced knowledge of regex, transforms, and grok rules for real-time data manipulation.
• Scalability and Performance: Ability to optimize Cribl deployments for high scalability and performance.
• Integration: Experience integrating Cribl with various data sources and destinations, such as Splunk, ELK, and cloud services.

• Proficiency with Data Tools: Expertise in Splunk, Cribl, and ELK, and familiarity with standard data formats or protocols like JSON, CSV, and syslog. Advanced experience with regex/transforms/grok rules.
• Network Protocols: Strong understanding of major protocols (HTTP, TCP, UDP, etc.), and the ability to explain and differentiate them (e.g., TCP vs UDP, HTTP request/response).
• Linux Administration Skills: Comprehensive knowledge of Linux, including bash and GNU CLI tools (grep, tail, sed, etc.) and subsystems like systemd. Ability to explain Linux concepts, such as filesystems, kernel tuning, /proc, boot process, etc. Knowledge of eBPF and modern Linux concepts is a plus.
• GitHub VCS Fundamentals: Proficient with GitHub and CI/CD integrations (Jenkins, GitHub Actions, etc.).
• Container and Job Systems: Experience with container and job systems like Kubernetes (K8s), Nomad, ECS, and understanding of container primitives on Linux.
• Enterprise Authentication and Authorization: Familiarity with enterprise authentication and authorization systems and protocols (SAML/LDAP/OIDC or similar).
• Network Design and Troubleshooting: Strong network design and troubleshooting skills, including DNS.
• Configuration Management: Knowledge of large-scale configuration management using tools like Ansible, Chef, Puppet, or Satellite, with experience managing via APIs.
• AWS Management: Experience with AWS management, particularly EC2, Route53, Lambda, VPC, and S3.

• ETL/Data Pipeline Implementation: Understanding of high-performance ETL/Data pipeline implementation and performance implications of various tools or protocols (Kafka, AMQP, Redis, Spark, MapReduce, etc.).
• Full-Stack Development: Experience developing full-stack web applications using modern technologies (React, HTMX, etc.).
• Monitoring and Observability Tools: Experience with monitoring and observability tools for cloud-based workloads, such as Grafana or Prometheus.
• Production Systems on AWS: Experience building production systems on AWS, including managing EC2, SSM, AMI builders like Packer, and OS authentication/authorization.

SAP