Splunk SME & Splunk Admin

Hiring:
Senior Splunk SME & Splunk Administrator

Experience:

14+

• Provide day to day administration and monitoring of Splunk and Cribl environments including system health, performance tuning, and capacity planning
• Maintain and support existing Splunk dashboards, alerts, searches, and data inputs while resolving issues as they arise
• Manage onboarding of new data sources through Cribl pipelines ensuring data quality and correct routing prior to indexing in Splunk
• Troubleshoot platform issues across the full logging lifecycle from data source through Cribl routing into Splunk indexing and search layers
• Maintain logging and monitoring configurations aligned to applicable compliance requirements within a regulated environment
• Participate in on call rotation and support scheduled after hours maintenance windows
• Collaborate with team members and leadership to ensure operational continuity during staffing transition
• Support development toward a self service dashboard model for internal stakeholders

• Strong hands on experience with Splunk administration including search, indexing, forwarders, knowledge objects, dashboards, alerts, and role based access control
• Working knowledge of Cribl Stream including routing, enrichment, filtering, and pipeline management
• Experience administering Linux systems including log collection, service management, and system troubleshooting
• Strong problem solving skills with ability to troubleshoot complex issues across the logging platform
• Effective communication skills with the ability to work across technical and non-technical stakeholders
• Ability to work in a Central Time Zone aligned schedule in a fully remote capacity
• Availability for occasional after hours support and on call rotation