Company: SHI Locuz Company,India
Job Title: Splunk Administrator
Skills :: Splunk Enterprise, Splunk Administration, Splunk Enterprise Security (ES), Distributed Architecture, Search Head, Indexer, Forwarder, Cluster Manager, License Manager, SPL, Linux/Unix, Log Onboarding, Log Ingestion, Syslog, Parsing, Field Extraction, SIEM, SOC, TCP/IP, DNS, SSL/TLS, Python/Bash/PowerShell
Experience: 2+ Years
Level: L2
Joining: Immediate to 15 Days
Mode of Interview :: Virtual
Please find below given JD.
Position : Splunk Administrator
Level: L2
Location : Mumbai
Key Responsibilities
- Administer and support Splunk Enterprise infrastructure in production environments.
- Manage and monitor Search Heads, Indexers, Forwarders, Cluster Managers, and License Managers.
- Troubleshoot data ingestion, indexing, search performance, and forwarder-related issues.
- Perform root cause analysis (RCA) and resolve incidents within SLA timelines.
- Onboard new log sources and configure data collection using Splunk Forwarders and Syslog.
- Manage Splunk configurations including inputs.conf, props.conf, transforms.conf, and outputs.conf.
- Monitor platform health, storage utilisation, indexing performance, and licence consumption.
- Configure and maintain dashboards, alerts, reports, and scheduled searches.
- Implement and manage RBAC, LDAP/AD integration, and Splunk security best practices.
- Support Splunk upgrades, patching, migrations, and disaster recovery activities.
- Automate operational tasks using Shell scripting, Python, or PowerShell.
- Work closely with SOC, Infrastructure, Application, and Security teams for platform support.
- Maintain operational documentation, SOPs, and troubleshooting runbooks.
- Ensure high availability, performance optimisation, and compliance with organisational standards.
Required Skills
- Hands-on experience with Splunk Enterprise and Enterprise Security Administration.
- Strong understanding of Splunk distributed architecture and clustering.
- Experience with Linux/Unix administration.
- Knowledge of SPL (Search Processing Language).
- Experience in log onboarding, parsing, and field extractions.
- Understanding of SIEM, SOC operations, and security monitoring.
- Basic networking knowledge (TCP/IP, DNS, Syslog, SSL/TLS, APIs).
- Scripting experience in Python, Bash, or PowerShell.
Experience
- 2-4 years of hands-on Splunk Administration experience.
- Splunk Enterprise Certified Admin certification preferred.