Strong Splunk knowledge: search heads, indexers, clustering, props/transforms, data models, CIM, and ES (preferred) Certified Splunk Architect Strong Linux system administration + troubleshooting skills Experience with automation tools (Ansible preferred) Familiarity with Git and version-controlled workflows Strong communication, documentation, and remote collaboration skills Experience working with MSSPs or multi-tenant environments is a plus