Splunk Administrator

Trivanet; United Arab Emirates; On-site; AED 180,000 - 300,000; Full time

Job summary

Trivanet in Dubai, United Arab Emirates, seeks a skilled Splunk Administrator to manage and optimize our Splunk infrastructure. You will deploy, configure, and maintain components, onboard data, and develop parsing and enrichment pipelines using SPL.

The candidate should have 3+ years of hands-on experience with Splunk Enterprise and Cloud, familiarity with ES and ITSI, and the ability to design dashboards, alerts, and reports while ensuring security and compliance.

Qualifications

• Bachelor’s degree in CS/IT or related field.
• 3+ years as Splunk Administrator or similar.
• Hands-on with Splunk Enterprise and Splunk Cloud.
• Familiarity with Splunk ES and ITSI is a plus.
• Experience with data onboarding, parsing, and normalization.

Responsibilities

• Deploy, configure, and maintain Splunk components.
• Monitor, optimize performance, and ensure high availability.
• Upgrade, patch, and troubleshoot to ensure stability.
• Onboard data from sources and develop parsing and enrichment.
• Design dashboards, reports, and alerts using SPL.
• Manage user roles, access controls, and provide end-user support.
• Create documentation and training guides.

Skills

SPL

Splunk architecture

Python

Bash

Security & compliance

Education

Bachelor's degree in Computer Science or related field

Tools

Splunk Enterprise

Splunk Cloud

Splunk ES

ITSI

Job description

Splunk Administrator

Job Summary:

We are seeking a skilled Splunk Administrator to manage and maintain our Splunk infrastructure. The ideal candidate will have hands‑on experience in deploying, configuring, and optimizing Splunk environments to support data analysis, monitoring, and security operations. This role requires strong technical expertise, attention to detail, and the ability to troubleshoot and resolve issues efficiently.

Key Responsibilities:

1. Splunk Infrastructure Management:
   1. Deploy, configure, and maintain Splunk components (e.g., Search Heads, Indexers, Forwarders, Deployment Server).
   1. Monitor and optimize Splunk infrastructure for performance, scalability, and high availability.
   1. Perform regular upgrades, patches, and troubleshooting to ensure system stability.
2. Data Onboarding and Configuration:
   1. Onboard data from various sources (e.g., logs, metrics, events) into Splunk.
   1. Develop and maintain data parsing, normalization, and enrichment using Splunk configurations.
   1. Create and manage data inputs, indexes, and field extractions.
3. User Management and Support:
   1. Manage user roles, permissions, and access controls within Splunk.
   1. Provide technical support to end-users, resolving issues related to Splunk functionality.
   1. Conduct training sessions and create user guides to improve system adoption and efficiency.
4. Dashboards and Reporting:
   1. Design and develop custom Splunk dashboards, reports, and alerts to meet business requirements.
   1. Use Splunk’s Search Processing Language (SPL) to create complex queries and visualizations.
   1. Provide actionable insights to stakeholders through data analysis and visualization.
5. Security and Compliance:
   1. Implement and enforce security policies to protect Splunk environments and data.
   1. Monitor and analyze security events, logs, and alerts to identify potential threats.
   1. Ensure compliance with industry standards and regulations (e.g., GDPR, HIPAA, PCI-DSS).
6. Integration and Automation:
   1. Configure and manage integrations between Splunk and other systems (e.g., SIEM, ITSM, cloud platforms).
   1. Develop and maintain automated workflows and scripts to streamline data collection and analysis.
   1. Troubleshoot and resolve integration issues.
7. Documentation and Best Practices:
   1. Maintain detailed documentation of Splunk configurations, processes, and procedures.
   1. Develop and update disaster recovery and business continuity plans for Splunk environments.
   1. Stay updated on Splunk best practices, new features, and industry trends.

Qualifications:

• Education: Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Experience:
  • 3+ years of experience as a Splunk Administrator or in a similar role.
  • Hands‑on experience with Splunk Enterprise and Splunk Cloud.
  • Familiarity with Splunk Enterprise Security (ES) and IT Service Intelligence (ITSI) is a plus.
  • Experience with data onboarding, parsing, and normalization.
• Technical Skills:
  • Proficiency in Splunk Search Processing Language (SPL).
  • Knowledge of Splunk architecture and components (e.g., Indexers, Search Heads, Forwarders).
  • Familiarity with scripting languages (e.g., Python, Bash) for automation.
  • Understanding of security and compliance requirements.
• Certifications(Preferred):
  • Splunk Certified Administrator.
  • Splunk Certified Power User.
  • Splunk Certified Enterprise Security Admin.
• Soft Skills:
  • Strong analytical and problem‑solving skills.
  • Excellent communication and interpersonal abilities.
  • Ability to work independently and as part of a team.

Work Environment:

• Location: Dubai, United Arab Emirates
• Travel: Need to relocate to Dubai

Why Join Us?

• Opportunity to work with cutting‑edge Splunk technologies.
• Collaborative and innovative work environment.
• Competitive salary and benefits package.
• Professional growth and development opportunities.