Splunk Administrator

Company Description

Job Description and key skills:

• Monitor Splunk infrastructure, logs & dashboards for anomalies.
• Respond to alerts & incidents as part of business support.
• Perform initial triage, escalate to L3 when required.
• Work on incident resolution within defined SLA’s.
• Document the RCA for major incidents.
• Ensure high availability & reliability of Splunk environments (indexers, SHs, forwarders, etc.).
• Perform routine health checks & system audits.
• Handle Splunk configuration changes (inputs.conf, outputs.conf, props.conf, etc.).
• Manage users' access & roles.
• Identifying & resolving performance bottlenecks in indexing & searching.
• Monitor ingestion rates, indexing latency, data missing & storage usage.
• Work on daily deployments to create, update, and delete the Splunk apps, add-ons & configuration in a controlled manner.
• Maintain & validate data onboarding process with BSA, BAs, etc.
• Using scripts (bash, Python, etc.) to automate routine tasks.
• Work with CI/CD pipelines for Splunk deployments.
• Integrate Splunk with tools like ServiceNow, AWS, git, Jenkins, etc.
• Strong hands-on with Splunk core (Indexer, SH, Forwarder)
• Strong knowledge of Linux, networking & cloud platforms (AWS, GCP)
• Familiarity with ITIL process, especially incident, problem & change management

Tools: ServiceNow, Git, Jenkins, AWS, GCP

Certifications:-

• Splunk Core Certified User / Splunk Core Certified Power User
• Splunk Enterprise Certified Admin
• Splunk Cloud Certified Admin

Total Experience Expected: 06-08 years

Qualifications

Qualification

B.E. /B Tech in IT or Computer Engineering.

Additional Information

European Shift (if required).

At our organization, we are committed to fighting against all forms of discrimination. We foster a work environment that is inclusive and respectful of all differences.

All of our positions are open to people with disabilities.