Senior Splunk Data Admin — Melbourne

ITbility; City of Melbourne; On-site; AUD 120,000 - 170,000; Full time

Job summary

ITbility in Melbourne is seeking a Splunk Data Administrator for a permanent role. The candidate will manage Splunk deployment, data onboarding, and ensure CIM-compliant data quality across on‑prem and cloud environments.

You will work with senior engineers to design scalable Splunk architectures, implement advanced field extractions, SPL queries, and deployment strategies while maintaining reliability and security in an Australian-based team.

Qualifications

• 5–10 years experience with Splunk administration and data onboarding.
• Field extraction (regex, JSON/KV extraction) and parsing troubleshooting.
• TA installation/configuration and deployment across Splunk tiers.
• Experience with indexer clusters, SH/SHC, forwarder management, deployment server.
• Hybrid on-prem + cloud patterns, connectivity, and ingestion strategies.
• SPL writing and validation for data quality and CIM compliance.
• Cloud logging patterns (AWS/Azure/GCP) a plus.
• Eligible to work in Australia.

Skills

Splunk admin

Data onboarding

Regex extractions

JSON extraction

KV extraction

SPL writing

CIM compliance

Splunk architecture

Cloud integration

Tools

Splunk Enterprise

Deployment Server

Indexers

Cloud platforms

Job description

ITbility in Melbourne is seeking a Splunk Data Administrator for a permanent role. The candidate will manage Splunk deployment, data onboarding, and ensure CIM-compliant data quality across on‑prem and cloud environments.

You will work with senior engineers to design scalable Splunk architectures, implement advanced field extractions, SPL queries, and deployment strategies while maintaining reliability and security in an Australian-based team.