Data Administrator

ITbility; City of Melbourne; On-site; AUD 120,000 - 170,000; Full time

Job summary

ITbility in Melbourne is seeking a Splunk Data Administrator for a permanent role. The candidate will manage Splunk deployment, data onboarding, and ensure CIM-compliant data quality across on‑prem and cloud environments.

You will work with senior engineers to design scalable Splunk architectures, implement advanced field extractions, SPL queries, and deployment strategies while maintaining reliability and security in an Australian-based team.

Qualifications

• 5–10 years experience with Splunk administration and data onboarding.
• Field extraction (regex, JSON/KV extraction) and parsing troubleshooting.
• TA installation/configuration and deployment across Splunk tiers.
• Experience with indexer clusters, SH/SHC, forwarder management, deployment server.
• Hybrid on-prem + cloud patterns, connectivity, and ingestion strategies.
• SPL writing and validation for data quality and CIM compliance.
• Cloud logging patterns (AWS/Azure/GCP) a plus.
• Eligible to work in Australia.

Skills

Splunk admin

Data onboarding

Regex extractions

JSON extraction

KV extraction

SPL writing

CIM compliance

Splunk architecture

Cloud integration

Tools

Splunk Enterprise

Deployment Server

Indexers

Cloud platforms

Job description

We are looking for a Splunk Data Administrator this is Permanent role in Melbourne.

Required Skills:

• 5–10 years experience with Splunk administration and data onboarding (or equivalent depth).
• Strong practical knowledge of:
• Field extraction (regex, JSON/KV extraction), and troubleshooting parsing issues
• TA installation/configuration and deployment patterns across Splunk tiers
• Experience with complex Splunk architectures:
• Indexer clusters, SH/SHC, forwarder management, deployment server
• Hybrid patterns (on-prem + cloud), connectivity, and ingestion strategies
• Comfortable writing and validating SPL for data quality and CIM compliance.
• Strong log source knowledge across common domains:
• Cloud: AWS/Azure/GCP logging patterns (nice-to-have)

All candidates should have full working rights in Australia. Only shortlisted candidates will be contacted for this role.