Splunk Administrator

Information and Technology Solutions (ITS) enables the WBG to achieve its mission of ending extreme poverty and promote shared prosperity in a sustainable way by delivering transformative information and technologies to its staff working in over 150 locations.

Our vision is to transform how the Bank Group accomplishes its mission through information and technology. In this fast-paced, ever-changing world, the formulation and implementation of the ITS strategy is an ongoing, iterative process of learning and adaptation developed through extensive consultations with business partners throughout the World Bank Group.

ITS shapes its strategy in response to changing business priorities and leverages new technologies to achieve three high-level business outcomes: business enablement, by providing Bank Group units with innovative digital tools and technologies to transform how they deliver value for their clients; empowerment & effectiveness, by ensuring that all Bank Group staff are connected, able to find information, and productive to accelerate the delivery of development solutions globally; and resilience, by equipping the Bank Group to provide risk-based cybersecurity and robust data protection for a global network and a growing cloud platform.

Implementation of the strategy is guided by three core principles. The first is to deliver solutions for business partners that are customer-centric, innovative, and transformative. The second is to provide the Bank Group with value for money with selective and standard technologies. The third principle is to excel at the basics by providing a high performing, robust, and resilient IT environment for the organization.

The Enterprise Authentication Services Team is anchored in the Enterprise Services (ITSEN) division in ITS. The primary programs that the ITSEN unit is responsible for is providing a wide range of technical infrastructure services to meet the institution’s computing needs, from mid-range servers, large scale servers, and the respective system, network, and supporting software on those platforms. It provides engineering, integration, and system administration services for Server Administration, Server Security, Backup/Restore, Storage, Virtual infrastructure (on premise and in cloud) and Data Center Management.

We provide a meaningful, open, and collaborative environment. We have many interesting problems to solve, providing you an opportunity to develop your skills while contributing to the mission of the bank. We value teamwork, openness, curiosity, and persistence.

The IT Officer is responsible for designing, developing, configuring, testing, and operating large Splunk deployments. The candidate will help to define and implement the WBG Log Management vision, with distributed logging environments. This will require a broader understanding of the market and industry trends. The candidate must have a technical background and experience with Splunk or other similar platforms for collecting/analyzing logs from IT infrastructure and applications. Candidate should have strong scripting and programming skills. Experience with Cribl is a plus. 

Roles and Responsibilities:

• Provide technical support for the existing Splunk deployment and ensure it is running at optimal performance.
• Design and implement best practices for log management, build standards and guide clients in these best practices
• Identify gaps in existing operation, assign tasks to contractors
• Establish standards and best practices for managing log data and knowledge objects, taking into account security, e.g. RBAC, and usability
• Identify and implement improvements in the data quality, security and usability of the log data
• Identify and implement additional data sources, or new uses for existing data that will increase the value
• Provide input on architectural design considering, changes in technology within the context of ITS’ current implementation and future roadmap.
• Advise on implementation of new features and components. Work with clients ensure the features are used correctly.
• Guide contractual team members and oversee operational tasks.

Selection Criteria:

• Master’s degree with 5 years relevant experience or Bachelors Degree with a minimum of 7 years relevant experience.
• Role Specific Experience: 5+ years of experience in being a key contributor for a large Splunk deployment (2TB per day +), or equivalent log management platform
• Advance knowledge of all facets of a Splunk deployment, Indexers, Heavy and Universal forwarders, Search heads, SHC
• Strong Cribl experience is a plus
• Strong Python scripting skills
• Advanced Splunk App Development skills
• Proven skills in supporting other platforms that enable extensive search, monitoring, analysis, and visualization of big data gathered from various ITS system components
• Strong knowledge of Splunk Core, Enterprise security and ITSI
• Strong knowledge of Splunk Query Language and the ability to create advanced dashboards
• Advanced understanding of log management and how to use UF and HF to manipulate inputs to create standard formats. Experience with Cribl is a plus
• Familiarity with performance analysis using performance monitoring and tuning tools.
• Strong analytical thinking skills.
• Experience in Agile Methodology
• Team player who works well with technical and non-technical resources.
• Stays abreast of new technology trends in project management area, and the broader IT industry.
• Excellent interpersonal skills, including an ability to work effectively in a team/task force as a participant or team leader.
• Excellent oral and written communications skills and experience interacting with both business and IT individuals.

Source: https://worldbankgroup.csod.com/ats/careersite/JobDetails.aspx?id=26980&site=1