• Design, deploy, and maintain large-scale on-premises and cloud-based Splunk environments to support enterprise monitoring and security alerting. • Manage knowledge objects (fields, extractions, tags, event types, lookups, macros) and oversee configuration files (.conf and .cfg) across recent Splunk Enterprise versions. • Analyze and resolve complex data ingestion and parsing issues to ensure accurate data flow and integrity. • Create and optimize complex Splunk queries (SPL), dashboards, and alerts to support security and operational objectives. • Develop automation workflows and dashboard interfaces to streamline operations and reduce manual overhead. • Utilize REST APIs to integrate Splunk with external systems and cloud platforms. • Collaborate with cross-functional teams (DevOps, Security) and provide mentorship and technical guidance to junior team members. • Perform upgrades, patching, and performance tuning; participate in off-hours and weekend maintenance efforts as required.