Splunk Administrator​/Engineer

Direct message the job poster from Resolution Technologies, Inc.

We are looking for an experienced Splunk Administrator with a strong background in deploying, managing, and optimizing Splunk environments in large-scale enterprise settings. This role involves administering Splunk systems, integrating data sources, building dashboards, and collaborating with cross-functional teams to support monitoring and reporting needs. Familiarity with integration into monitoring tools like Dynatrace, Gigamon, and Solar Winds is highly desired.

• Splunk Deployment and Environment Management:
  Install, configure, and maintain Splunk environments, including Splunk Cloud and On-Premises systems. Administer core Splunk components, such as indexers, search heads, cluster masters, deployment servers, and forwarders. Oversee system health, manage upgrades, patches, and performance tuning to ensure high availability and reliability.
• Data Onboarding and Management:
  Integrate and onboard diverse data sources, ensuring accurate parsing, normalization, and enrichment. Develop and enforce data models compliant with the Common Information Model (CIM) for consistent analysis and correlation. Maintain data integrity and security across hybrid cloud and on-premises infrastructures.
• Monitoring, Optimization, and Troubleshooting:
  Monitor Splunk system performance, resource utilization, and service availability. Optimize Splunk indexing, searching, and storage efficiencies. Troubleshoot and resolve Splunk-related performance or functionality issues promptly.
• Dashboard Development and Reporting:
  Design, develop, and maintain visually intuitive dashboards, reports, and alerts to address business and operational requirements. Collaborate with stakeholders to translate technical data into actionable insights.
• Cross-Functional Collaboration and Support:
  Work closely with IT, security, business teams and others to understand monitoring and data visualization needs. Provide technical guidance and support for Splunk-related issues, including user training and documentation. Conduct regular check points with key stakeholders to ensure our products and services are effective and meeting the needs of our consumers.
• Integration with Monitoring Tools:
  Configure and integrate Splunk with existing monitoring solutions, including Solar Winds, Dynatrace, and Gigamon, to enhance observability and incident response.

• Splunk Administration:
  Minimum 3+ years of experience managing Splunk environments in enterprise settings.
• IT Infrastructure Expertise: 5+ years of experience in IT infrastructure, networking, architecture, administration, security, or similar.
• Technical Proficiency:
  Strong hands-on experience with Linux, both administration and engineering. Proficiency in Splunk Cloud and on-premise deployments. Expertise in scripting languages such as PERL, shell scripting, and Regex. Knowledge of Splunk Search Processing Language (SPL) for crafting complex queries.
• Problem-Solving
  
  Skills:
  
  Ability to troubleshoot and resolve technical issues efficiently.
• Communication:
  Effective communication, documentation, and presentation skills for both technical and non-technical audiences.

• Splunk certifications (e.g., Splunk Enterprise Certified Administrator or Architect).
• Experience designing, developing, and deploying customized Splunk technical add-ons.
• Familiarity with automation tools such as Ansible or Puppet.
• Understanding of XDR security frameworks and SIEM best practices.
• Experience with additional monitoring platforms such as Solar Winds, Gigamon and Dynatrace.

• Seniority level:
  Mid-Senior level
• Employment type:
  
  Contract
• Job function:
  Information Technology