Job Description

• Monitor the health, performance, and capacity utilization of Splunk infrastructure.
• Implement best practices for Splunk deployment, configuration, and optimization.
• Design and manage Splunk data models, indexes, and search heads.
• Develop and maintain Splunk alerts, dashboards, and reports to meet client needs.
• Troubleshoot and resolve issues related to Splunk configuration, data ingestion, and search performance.
• Collaborate with client stakeholders and cross-functional teams to integrate Splunk with other systems and applications.
• Provide training and support to client teams on Splunk usage and best practices.

• Proven experience as a Splunk Administrator or similarly named Splunk focused role.
• Strong understanding of Splunk architecture, components, and deployment options.
• Proficiency in Splunk Search Processing Language (SPL) for creating complex search queries and reports.
• Experience with Splunk data ingestion methods, including forwarders, Event Collector (HEC), and scripted inputs.
• Familiarity with Splunk Enterprise Security (ES), Qumolos, and Splunk SOAR is a plus.
• Solid understanding of IT infrastructure, including networking, operating systems, and security principles.
• Excellent problem-solving skills and attention to detail.
• Strong communication and collaboration abilities.

• Splunk Architect is desired.
• Splunk Certified Administrator certification desired.
• 8140/8570 IAT Level III certification required.

Job Tags

Similar Jobs