Splunk Admin

We are urgently hiring for Splunk Administrator - United States.

Title: Splunk Administrator

Location: DMV Area/Hybrid

Experience: 8+

Duration: LongTerm

If you are interested in this position, please share your updated resume -

Job Summary

We are seeking an experienced Splunk Administrator with 8+ years of experience to manage, configure, and optimize our Splunk environment. The ideal candidate will be responsible for maintaining Splunk infrastructure, integrating data sources, creating dashboards, and ensuring system performance and security.

Key Responsibilities:

• Install, configure, manage, and troubleshoot Splunk Enterprise, Splunk Cloud, and Splunk Enterprise Security (ES).
• Maintain and optimize Splunk infrastructure, including indexing, search head clustering, and forwarder management.
• Develop custom dashboards, alerts, and reports using SPL (Search Processing Language).
• Onboard new data sources and ensure proper parsing, indexing, and normalization.
• Monitor and optimize Splunk performance, including log ingestion, indexing, and searches.
• Implement role-based access controls (RBAC) and security best practices.
• Work with SIEM, IT operations, and security teams to enhance monitoring and threat detection.
• Automate processes using Python, Shell scripting, or Ansible.
• Maintain Splunk best practices, documentation, and troubleshooting guidelines.
• Support incident response and root cause analysis related to Splunk.

Required Skills & Qualifications:

• 5+ years of experience as a Splunk Administrator or Engineer.
• Strong expertise in Splunk architecture, deployment, and troubleshooting.
• Hands-on experience with Splunk forwarders, indexers, search heads, and clustering.
• Proficiency in SPL (Search Processing Language) for data queries and reporting.
• Experience with log management, data onboarding, and parsing.
• Knowledge of Linux administration and scripting (Bash, Python, or PowerShell).
• Understanding of IT security, SIEM, and compliance requirements.
• Familiarity with cloud-based Splunk deployments (AWS, Azure, Google Cloud Platform) is a plus.
• Splunk certifications (e.g., Splunk Certified Admin, Power User, Architect)

Education & Certifications:

• Bachelor s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Splunk Certified Admin or Architect is highly desirable.

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.