Splunk Administrator

Job Title:

Splunk Administrator

Location:

Canada – Toronto, Ottawa, Mississauga

Locations (US):
Alpharetta, GA;
Charlotte, NC;
Chicago, IL;
Conshohocken, PA;
Denver, CO;
Fargo, ND;
Garden City, NY;
Houston, TX;
Lubbock, TX;
Morristown, NJ;
Mt Juliet, TN;
Rochester, NY;
Purchase, NY;
Topeka, KS

Job Type: Contract Position

• Monitor log ingestion volumes and platform health using custom searches and Splunkbase tools.
• Ensure reliable log delivery and troubleshoot ingestion interruptions across supported sources.
• Administer intermediate log collection components, including Logstash, syslog, Heavy Forwarders, and related services.
• Manage Splunk application configurations on Universal Forwarders using the Splunk Deployment Server.
• Perform Universal Forwarder upgrades and maintenance to address security, stability, and version requirements.
• Manage and update Splunk applications within the Splunk Cloud environment.
• Collaborate with security and infrastructure teams to support onboarding of new log sources.
• Document configurations, procedures, and troubleshooting steps for operational use.

• 3–5 years of hands‑on experience administering Splunk in an enterprise environment.
• Splunk Cloud and on‑prem Splunk infrastructure, including Heavy Forwarders, Deployment Server, and Universal Forwarders.
• HTTP Event Collector (HEC).
• Common Splunk Technology Add‑ons (TAs), including Azure, Okta, and other cloud services.
• Splunk data models and data normalization practices.
• Splunk features such as alert actions, SAML‑based authentication, KV store, and lookups.
• Splunk role‑based access controls and permission models.
• Data management features including DDAS and reindexing processes.

• Azure Event Hubs, Kafka, Log Analytics Work spaces, and cloud‑based logging pipelines.
• Windows Event Collection (WEC) and Windows Event Forwarding (WEF).

• Ability to create clear, concise technical documentation for both technical and non‑technical audiences.
• Strong analytical and troubleshooting skills with the ability to work independently.
• Effective time and priority management in a multi‑task operational environment.
• Strong written and verbal communication skills.

• Bachelor’s degree in Information Technology, Computer Science, or a related field, or equivalent professional experience.