Kevin Darmon

Lead Splunk Architect & Observability Manager

CGI · Greater Toulouse Metropolitan Area

Leading the end-to-end architecture and deployment of the central observability platform for Airbus Export Control, ensuring strict adherence to European (GDPR) and US Global trade compliance regulations across worldwide entities.

• Architecture Design: Designed a fault-tolerant ingestion pipeline leveraging Splunk and Kafka to handle high-throughput sensitive data, with a routing topology segregating flows by legal classification.
• Security & Governance: Implemented granular Role-Based Access Control (RBAC) and dynamic data masking strategies to meet military-grade security standards.
• Platform Engineering: Managed the full lifecycle of the Splunk infrastructure (Search Head Clusters, Indexer Clusters), optimizing search performance and storage efficiency (SmartStore).
• Strategic Leadership: Translated complex legal requirements into actionable dashboards for executive decision-makers, ensuring zero-blind-spot visibility on data movements.

Splunk/Observability Expert & Solution Architect

CGI · Toulouse, Occitanie, France

• Specialized in enhancing system performance and visibility through the strategic use of observability tools (Splunk, Datadog, and more), driving data-driven insights and proactive monitoring solutions.
• Owned integration, configuration, and management of these tools across diverse environments, enabling seamless operations and robust performance monitoring.

Splunk Engineer — Fraud Detection & Security

CGI · Toulouse, Occitanie, France

• Detection Engineering: Developed and optimized advanced fraud detection rules using SPL and Python, reducing false positives for the cybersecurity team.
• Rule Management (CI/CD): Implemented 'Detection as Code' principles, managing configuration files (splconf/YAML) via Git versioning to streamline rule deployment.
• Stakeholder Management: Coordinated with compliance teams to translate new fraud patterns into technical detection logic.

Tech Lead Splunk SOC

Thales · Toulouse, Occitanie, France

• Technical Leadership: Led the Splunk SOC team, managing resource allocation, project priorities, and architectural roadmap.
• Architecture & Design: Designed scalable Splunk architectures and data models to support increasing log volumes from diverse security sources.
• Optimization: Conducted deep-dive performance tuning of the Splunk environment (Indexers/Forwarders) to ensure real-time threat detection capabilities.

Business Analyst & Splunk Consultant (Cybersecurity)

CGI · Toulouse, Occitanie, France

• Bridging Tech & Biz: Managed deployment requests from Business and SOC teams, translating functional needs into technical Splunk implementations.
• DevOps Integration: Collaborated with DevOps teams to integrate Splunk App deployment into CI/CD pipelines, automating delivery to Integration and Production environments.
• Enterprise Security: Administered Splunk Enterprise Security (ES) for threat intelligence and incident response.

Data Scientist

CGI · Toulouse, Midi-Pyrénées, France

• Collected functional and technical monitoring needs from clients and aggregated multiple data sets from server groups into Splunk.
• Developed real-time Splunk dashboards (Splunk Core, Splunk Studio, Splunk ITSI) to monitor data flows between servers.
• Created, modified, and administered the Splunk architecture; administered Splunk for the SOC team.

Data Scientist

Atos · Région de Paris, France

• Studied Google BERT and presented it to the Atos Scientist Community.
• Implemented Google BERT in a short-text NLP algorithm used by international Customs.
• Authored a thesis on adapting popular NLP algorithms to short-text contexts.