Splunk Administrator

Hybrid in Charlotte, NC, US • Posted 1 day ago • Updated 1 day ago
Contract Corp To Corp
Contract W2
Hybrid
Depends on Experience
Fitment

Dice Job Match Score™

🎯 Assessing qualifications...

Job Details

Skills

  • Splunk Admin

Summary

Job Title: Splunk Administrator
Location: Alpharetta, GA; Charlotte, NC; Chicago, IL; Conshohocken, PA; Denver, CO; Fargo, ND; Garden City, NY; Houston, TX; Lubbock, TX; Morristown, NJ; Mt Juliet, TN; New York, NY; Purchase, NY; Topeka, KS Hybrid 03 days per week
Job Type: Long Term Contract
The Splunk Administrator is responsible for supporting and maintaining Sompo s Splunk Cloud environment and associated log ingestion components. This role ensures reliable data collection across diverse sources, monitors platform health and capacity, and performs ongoing administration, updates, and configuration to support security operations and analytics.
ROLE RESPONSIBILITIES
  • Monitor log ingestion volumes and platform health using custom searches and Splunk base tools.
  • Ensure reliable log delivery and troubleshoot ingestion interruptions across supported sources.
  • Administer intermediate log collection components, including Logstash, syslog, Heavy Forwarders, and related services.
  • Manage Splunk application configurations on Universal Forwarders using the Splunk Deployment Server.
  • Perform Universal Forwarder upgrades and maintenance to address security, stability, and version requirements.
  • Manage and update Splunk applications within the Splunk Cloud environment.
  • Collaborate with security and infrastructure teams to support onboarding of new log sources.
  • Document configurations, procedures, and troubleshooting steps for operational use.
TECHNICAL QUALIFICATIONS
Hands on experience administering:
  • 3 5 years of handson experience administering Splunk in an enterprise environment.
  • Splunk Cloud and on prem Splunk infrastructure, including Heavy Forwarders, Deployment Server, and Universal Forwarders.
  • HTTP Event Collector (HEC).
  • Common Splunk Technology Add ons (TAs), including Azure, Okta, and other cloud services.
  • Splunk data models and data normalization practices.
  • Splunk features such as alert actions, SAML based authentication, KV store, and lookups.
  • Splunk role based access controls and permission models.
  • Data management features including DDAS and reindexing processes.
Familiarity with:
  • Azure Event Hubs, Kafka, Log Analytics Workspaces, and cloud based logging pipelines.
  • Windows Event Collection (WEC) and Windows Event Forwarding (WEF).
GENERAL QUALIFICATIONS
  • Ability to create clear, concise technical documentation for both technical and nontechnical audiences.
  • Strong analytical and troubleshooting skills with the ability to work independently.
  • Effective time and priority management in a multitask operational environment.
  • Strong written and verbal communication skills.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
  • Dice Id: 10457941
  • Position Id: 8948612
  • Posted 1 day ago
Create job alert
Set job alertNever miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Charlotte, North Carolina

5d ago

Easy Apply

Contract

Depends on Experience

Charlotte, North Carolina

2d ago

Easy Apply

Contract, Third Party

Depends on Experience

Charlotte, North Carolina

2d ago

Easy Apply

Contract, Third Party

Depends on Experience

Charlotte, North Carolina

2d ago

Easy Apply

Contract

$30 - $40

Search all similar jobs