Segun B.

Designed and deployed enterprise-grade Splunk environments, including multi-site Indexer Clusters, standalone and clustered Search Heads, Cluster Manager, Deployment Server, and License Manager to support security operations and IT monitoring. Led the configuration of Splunk components on hardened RHEL systems, ensuring compliance with DISA STIG requirements, optimized system performance, and secured data ingestion and access using TLS/SSL and role-based access control. Implemented search-time and index-time field extractions, deployed CIM-compliant TAs, and validated field normalization across sourcetypes using tstats and data model acceleration for SOC and ITSI use cases. Built and optimized technical health dashboards, using Splunk Monitoring Console to monitor ingestion rates, indexer performance, data latency, forwarder status, and licensing compliance in distributed environments. Troubleshot data gaps and field extraction issues, identifying root causes in Splunk Web using internal logs (_internal, _audit), validating TA functionality, and ensuring parsing accuracy across environments with vendor-specific sourcetypes.

• Take responsibility for the delivery of projects within the constraints of schedule, scope, features/functionality, and budget • Monitor and report on all aspects of your projects including progress, project profitability, forecasted hours, risks, communications, and customer concerns • Work with the Resource Managers to ensure that your projects have the best people with the right skills and at the right time. • Contribute to and lead the development and maintenance of Splunk standards, processes, and practices. • Required to maintain a Top Secret Clearance • 5+ years of relevant experience implementing Splunk products with a track record of on-schedule delivery. • Practical understanding of cloud-centric architectures and services • Experience in customer-facing, problem-solving positions. • An understanding of ITSI, SIEM, Splunk Enterprise Security (ES), and Splunk Cloud. (Ideally Splunk migration) • Strong communication, time management, and interpersonal skills.

Design efficient and reusable reports and dashboards to integrate multiple mission applications’ health, performance and operational data systems into Splunk. • Create front-end automated data visualization services using Splunk • Create viewable Splunk dashboards to provide visibility into ingested log data • Create alerts that trigger/activate on configured setting to deploy or sends a note/email/attachments to a particulate destination email or groups • Create security rules (alerts) that trigger on anomalous activities or threat detections • Utilize Qmulos, Splunk, Assured Compliance Assessment Solution (ACAS), Host Based Security System (HBSS), and Tanium to assess/validate/monitor the security controls and security posture of the enterprise and system level in order to support on-going authorization.

• Architect, design, support, and maintain Splunk infrastructure for a highly available and disaster recovery configuration • Administer Splunk and Splunk Application for Enterprise Security (ES) log management • Standardize Splunk agent deployment, configuration, and maintenance across a variety of UNIX and Windows platforms • Troubleshoot Splunk server and agent problems and issues • Assist internal users of Splunk in designing and maintaining production-quality dashboards • Mentor users and other groups on their use of Splunk • Monitor the agent and server infrastructure for capacity planning and optimization • Design core systems performance and troubleshooting logs • Support Splunk on Unix, Linux, and Windows-based platforms • Perform data mining and analysis, utilizing various queries and reporting methods • Solve complex Integration challenges and debug complex configuration issues • Technical writing/creation of formal documentation such as architecture diagrams, technical designs, and SOPs

• Scheduled saved searches for execution during specified time windows and normalized data during searches using CIM to conform to common Splunk application and dashboard standards. • Performed daily platform health checks and server monitoring while determining issues and outage root causes; contributed to permanent system architecture solutions. • Coordinated and communicated with other technical team members to troubleshoot security issues, identified automation opportunities, implemented features within a large enterprise environment, and developed standard operation documentation aligned with company-defined goals. • Utilized Splunk Enterprise to search, monitor, and analyze multi-source data and gain valuable organization-wide cyber-security intelligence and insights.

Quartermaster and chemical equipment repairer

Balancing Cash registers, Train new employees, shift/floor supervisor