Splunk Administrator

Key Responsibilities

Splunk Administration

• Install, configure, and maintain Splunk components (indexers, search heads, forwarders, deployment servers).
• Onboard and manage data inputs, sourcetypes, indexes, and field extractions.
• Create and maintain dashboards, alerts, reports, and knowledge objects.
• Manage user roles, permissions, and access controls.
• Perform routine upgrades, patching, and health checks across the environment.

SRE Duties

• Monitor platform health, capacity, and performance; proactively address bottlenecks.
• Respond to incidents (INCs), perform troubleshooting, and drive timely resolution.
• Participate in on-call rotation and support major incident management.
• Contribute to root cause analysis (RCA) and implement preventive measures.
• Define and track SLOs/SLIs for platform reliability and availability.
• Automate routine operational tasks to reduce manual effort (scripting/config management).
• Support capacity planning and forecasting for data ingestion growth.

Collaboration & Continuous Improvement

• Work with development, infrastructure, and data teams to onboard new services.
• Document runbooks, standard operating procedures, and known error solutions.
• Identify and implement improvements to enhance stability and efficiency.

Requirements & Tech Stack

• Working knowledge of Splunk administration (indexes, inputs, search, dashboards, alerts).
• Understanding of SPL (Search Processing Language) for queries and troubleshooting.
• Familiarity with Linux/Unix systems and command-line operations.
• Basic scripting skills (Bash, Python, or PowerShell) for automation.
• Understanding of networking, log sources, and data pipelines.
• Awareness of ITIL processes (incident, problem, and change management).
• Strong troubleshooting and problem-solving abilities.
• Good communication and documentation skills.

Desirable / Nice to Have

• Splunk Certified Admin (or working towards certification).
• Experience with monitoring/observability tools (Prometheus, Grafana, ITSI).
• Exposure to CI/CD pipelines and infrastructure-as-code (Ansible, Terraform).
• Cloud platform experience (AWS, Azure, or GCP).
• Understanding of Kafka or other data-streaming technologies.

Key Attributes

• Reliability-focused mindset with strong attention to detail.
• Proactive, self-motivated, and able to work under pressure.
• Team player with a continuous-improvement attitude.
• Willingness to participate in on-call and out-of-hours support when required.