Architecture Analyst

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.

Primary Responsibilities:

• Review, rationalize, and optimize existing knowledge objects to eliminate redundancy and inefficiencies
• Automate remediation of poorly written knowledge objects, including user communication
• Support and execute migration from onprem Splunk Enterprise to Splunk Cloud
• Design and maintain high-quality, reusable SPL for enterprise use cases
• Monitor and analyze Splunk Virtual Compute (SVC) consumption
• Monitor the health and performance of large, distributed Splunk environments including HFs/UFs, search head clusters, Edge Processors, etc.
• Automate processes to identify SVC waste, redundancy, excessive use
• Document operational health standards, thresholds, and runbooks to support consistent platform operations
• Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so

• Bachelor's degree in Computer Science, Engineering, or equivalent experience
• 4+ years of experience with Splunk+
• Hands-on experience supporting large-scale, distributed Splunk deployments in production
• Proven experience managing and governing Splunk knowledge objects at scale
• Solid understanding of Splunk Cloud architecture and limitations
• Proven "automation first" mindset to solving problems
• Advanced to expert proficiency in SPL, including:
  • Complex stats, eval, lookup, mv, and conditional logic
• Performance tuning and search optimization
• Solid Linux/Unix fundamentals