Senior Splunk Consultant - Melbourne

Ayan Infotech are urgently looking for a Senior Splunk Consultant for a long term (12+ months) or a full-time permanent job opportunity in Melbourne (Sydney can be considered as work location too).

All applicants must have full unrestricted work rights in Australia.

Title: Senior Splunk Consultant
Type: Contract (12+ months) OR permanent
Location: Melbourne preferred, Sydney okay too
Nature of work: Hybrid (2-3 days in office in a week)

Required Skills and Experience:

Here are some of the areas that are key to being successful in the role

• Splunk Administration
• Splunk Enterprise & Splunk Cloud
• Splunk Data Onboarding
• SPL Query Development & Optimization
• CIM / Data Governance / RBAC
• Field Extraction / Parsing / REGEX (Part of Splunk Data Onboarding)
• props.conf / transforms.conf: (Part of Splunk Data Onboarding)
• Splunk Indexer Cluster & SHC Administration
• Forwarders / Deployment Server Management
• Splunk Cloud Migration
• Technical Add-ons (TA) Installation & Configuration
• Hybrid Splunk Architecture
• Security Log Onboarding & Compliance
• Python Scripting
• Elastic Stack (Elasticsearch, Kibana, Fleet
• Dynatrace / AppDynamics Monitoring
• CI/CD Pipelines (Git, Ansible)
• Linux & Networking Basics
• Agile / Jira / ServiceNow

Essential Skills:

• 8-10 years experience with Splunk administration and data onboarding (or equivalent depth).
• Strong practical knowledge of:
  • CIM normalization, tags/eventtypes, datamodel alignment
  • Field extraction (regex, JSON/KV extraction), and troubleshooting parsing issues
  • props.conf / transforms.conf, sourcetypes, timestamps, line-breaking
  • TA installation/configuration and deployment patterns across Splunk tiers
• Experience with complex Splunk architectures:
  • Indexer clusters, SH/SHC, forwarder management, deployment server
  • Hybrid patterns (on-prem + cloud), connectivity, and ingestion strategies
• Comfortable writing and validating SPL for data quality and CIM compliance.
• Strong log source knowledge across common domains:
  • Security: EDR, firewall, proxy, IAM/auth, VPN, email security
  • Infrastructure: Windows, Linux, network devices, virtualization
  • Cloud: AWS/Azure/GCP logging patterns (nice-to-have)

Contact: for more details.