Splunk Admin

Sr. Splunk Admin – Remote (Long-Term)

Key Requirements:

• 8+ years of Splunk Administration experience.
• Strong expertise in Splunk Enterprise, Indexer Clustering, Search Head Clustering, and Forwarders.
• Experience with data onboarding using Syslog, UF, HEC, and DB Connect.
• Hands-on Linux/Unix and Windows Server administration.
• Knowledge of SSL, patching, firewall rules, capacity planning, and infrastructure support.
• Scripting experience with Python, Shell, PowerShell, or SQL.
• Experience with cloud platforms such as AWS, Azure, or IBM Cloud.
• Strong troubleshooting, performance tuning, and root cause analysis skills.
• Experience integrating Splunk with third-party APIs and applications.
• Excellent communication skills with the ability to work directly with stakeholders and lead technical teams.

Preferred:

• Splunk ES, SOAR, or ITSI experience.
• Splunk Certified Admin/Architect and/or AWS certifications.
• Experience mentoring teams and supporting critical production incidents.