Senior Splunk Consultant & Engineer

Driving advanced security information and event management (SIEM), enterprise log analytics, and mission-critical Splunk architecture in Riyadh, Saudi Arabia, DWT Technology is actively seeking an accomplished Senior Splunk Consultant and Engineer for an urgent 12-month on-site project engagement. In this vital technical leadership role, you will take full operational, architectural, and tactical ownership of Splunk enterprise environments, data ingestion pipelines, cluster scaling, and advanced dashboard creation.

Bringing 7+ years of progressive professional experience in Splunk enterprise administration and architecture, you will empower major enterprises in the Middle East to achieve uncompromised operational visibility, real-time threat detection, and robust data management resilience. This prestigious career opportunity offers top-tier remuneration, high professional visibility, and career growth within a premier international recruitment and IT consulting enterprise.

As a Senior Splunk Consultant supporting DWT Technology on an on-site basis in Riyadh, KSA for a 12-month contract duration, you will take full operational, tactical, and technical ownership of enterprise Splunk design, heavy forwarder maintenance, indexer and search head cluster management, and custom knowledge object configuration. Your day-to-day responsibilities include architecting scalable log ingestion workflows, building advanced dashboards, saved searches, alerts, and reports, tuning SPL queries for maximum performance, collaborating with enterprise cybersecurity and IT operations squads, and interacting directly with technical recruitment consultants like Salim S.

• Architect, design, deploy, configure, and maintain enterprise Splunk environments across complex multi-site infrastructure.
• Create and optimize advanced Splunk dashboards, saved searches, real-time alerts, operational reports, and custom knowledge objects.
• Design and manage robust data ingestion configurations, Universal Forwarders, Heavy Forwarders, indexer clusters, and search head clusters.
• Troubleshoot complex data pipeline bottlenecks, parsing errors, license capacity limits, and search performance latency.
• Author highly efficient Search Processing Language (SPL) queries, macros, event types, and automated alert actions.
• Collaborate seamlessly with enterprise security operations centers (SOC), system administrators, and client technical stakeholders.
• Ensure strict adherence to data governance policies, log retention schedules, and enterprise security compliance standards.
• Maintain meticulous technical documentation, cluster topology diagrams, ingestion runbooks, and configuration backup repositories.

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related technical discipline.
• Minimum of 7+ years of progressive professional hands-on experience in architecting, deploying, and configuring Splunk enterprise environments.
• Strong, demonstrable operational expertise in heavy forwarders, indexer clusters, and search head cluster architectures.
• Comprehensive working knowledge and practical proficiency in advanced SPL querying, dashboard creation, and alert management.
• Deep practical experience in data ingestion configurations, Universal Forwarder deployment, and log parsing rule development.
• Solid practical grasp of enterprise IT infrastructure, operating system administration (Linux/Windows), and networking fundamentals.
• Exceptional analytical problem-solving aptitude, system troubleshooting capabilities, and professional client communication skills.
• Mandatory current physical residency in Saudi Arabia with a valid, transferable Iqama…