Segun B.

Cyber Systems Administrator Splunk Architect @Peraton

Designed and deployed enterprise-grade Splunk environments, including multi-site Indexer Clusters, standalone and clustered Search Heads, Cluster Manager, Deployment Server, and License Manager to support security operations and IT monitoring.Led the configuration of Splunk components on hardened RHEL systems, ensuring compliance with DISA STIG requirements, optimized system performance, and secured data ingestion and access using TLS/SSL and role-based access control.Implemented search-time and index-time field extractions, deployed CIM-compliant TAs, and validated field normalization across sourcetypes using tstats and data model acceleration for SOC and ITSI use cases.Built and optimized technical health dashboards, using Splunk Monitoring Console to monitor ingestion rates, indexer performance, data latency, forwarder status, and licensing compliance in distributed environments.Troubleshot data gaps and field extraction issues, identifying root causes in Splunk Web using internal logs (_internal,_audit), validating TA functionality, and ensuring parsing accuracy across environments with vendor-specific sourcetypes.