Raja Mekala

Splunk Administrator & Developer with 5+ years of overall IT experience and 3.8 years of hands-on Splunk experience in SIEM, security monitoring, incident investigation, administration, development, and production support. Skilled in distributed Splunk Enterprise/Cloud, clustering, log onboarding, CIM-aligned detections, correlation searches, SPL optimization, dashboards, and troubleshooting. Familiar with network protocols, security architectures, threat landscapes, and security-framework/compliance concepts.

Splunk Engineer at Infosys | Orange Networks (2026-05 – 2026-10)

• Administered distributed Splunk SIEM environments for network, security, and operational monitoring; supported configuration, health management, and performance optimization.
• Onboarded and validated Windows/Linux, network, application, cloud, and HEC/API logs; configured sourcetypes, indexes, routing, and parsing.
• Built SPL searches, dashboards, reports, scheduled/real-time alerts, and drilldowns to support threat detection and incident investigation.
• Worked with ES/CIM mapping, correlation searches, notable-event triage, alert tuning, suspicious-login detection, and security incident workflows.
• Resolved forwarder connectivity, data gaps, indexing latency, parsing, search-performance, and platform-health issues using internal logs and Monitoring Console.
• Supported RBAC, knowledge objects, REST integrations, ServiceNow/Okta concepts, production changes, and cross-team incident response.

Splunk Engineer at Tech Mahindra (2024-07 – 2026-05)

• Managed Indexer and Search Head Clustering, cluster health, RF/SF validation, deployer app distribution, and high availability.
• Developed and tuned dashboards, reports, KPIs, lookups, KV Store objects, macros, field aliases, tags, and scheduled searches.
• Configured onboarding, parsing, index-time routing/filtering, retention policies; monitored capacity/licenses and handled upgrades, maintenance, troubleshooting, and RCA.

Splunk Developer at Yash Technologies (2023-11 – 2024-07)

• Built complex SPL searches and interactive dashboards supporting enterprise monitoring, threat detection, and incident-analysis workflows.
• Created reusable knowledge objects and accelerated Data Models; used tstats and query optimization to improve search performance.
• Developed CIM-aligned security use cases, correlation searches, and alerts for suspicious behavior and operational anomalies.

Senior Software Engineer at TEKsystems (2022-07 – 2023-11)

• Installed and configured Indexers, Search Heads, Deployment Server, License Manager, Universal Forwarders, and Heavy Forwarders.
• Managed forwarder deployments, server classes, apps/add-ons, RBAC, indexes, and log onboarding across Windows/Linux.
• Monitored indexing throughput, resource and license utilization, search performance, and ingestion health; troubleshot connectivity and data failures.
• Supported backup/DR, maintenance, cluster operations, and 24x7 incident resolution with application, network, and infrastructure teams.

Software Engineer at ITC Infotech (2021-09 – 2022-06)

• Supported Linux/Windows environments, server health checks, user administration, and application/infrastructure operations.
• Investigated OS, network, filesystem, service, and connectivity problems through system logs and standard administration tools.
• Coordinated incidents, maintenance, changes, and troubleshooting with cross-functional teams.

Master of Computer Applications (MCA)