Splunk Admin
Listed on 2026-10-18
-
IT/Tech
Cybersecurity, IT Support, Systems Engineer
The Splunk Administrator will manage, configure, and optimize Splunk environments, including troubleshooting and monitoring. They will also manage Splunk ITSI by maintaining Service Trees, KPIs, Glass Tables, and correlation searches to provide real-time IT service insights.
Opening Date: 10/11/2026 | Closing Date: 10/18/2026
Category:
Automation, Data & AI
Location :
Riyadh, KSA
Key Responsibilities
Administer and maintain Splunk Enterprise / Splunk Cloud (Clustered and Multi-Site) environments (indexers, search heads, deployment servers, forwarders, license management, clustering).
Install, configure, and manage Splunk ITSI
, including Service Trees, KPIs, Episode Review, Correlation Searches, Glass Tables, and Deep Dives.
Onboard and normalize data from multiple sources (infrastructure, applications, databases, security tools, cloud platforms).
Develop and maintain SPL searches, alerts, dashboards, and reports for monitoring, performance, and troubleshooting.
Monitor and optimize Splunk system performance, storage, and indexing throughput to ensure high availability and scalability.
Implement and manage user access controls
, roles, and permissions within Splunk and ITSI.
Support Incident and Problem Management processes using ITSI Episode Review and correlation logic.
Integrate Splunk/ITSI with external systems such as Service Now, App Dynamics, Solar Winds, or other ITSM and monitoring tools.
Provide documentation, user training, and operational procedures for Splunk and ITSI components.
Stay current on new Splunk and ITSI features, best practices, and integrations.
Required Qualifications & Skills
Bachelor’s Degree in Computer Science, Engineering, or related field.
3+ years of experience administering and managing Splunk environments.
Hands-on experience with Splunk ITSI
: building services, KPIs, correlation searches, glass tables, and episode review workflows.
Strong knowledge of SPL (Search Processing Language) and dashboard creation.
Familiarity with Linux
, Windows
, and networking fundamentals
.
Experience with
data onboarding from various sources (syslog, DB Connect, APIs, etc.).
Excellent troubleshooting and problem-solving skills.
Strong communication and collaboration skills; ability to work cross-functionally with IT, Dev Ops, and business teams.
Splunk Certifications are a plus (e.g., Splunk Core Certified Power User, Splunk Certified Admin, Splunk ITSI Certified).
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).