Splunk Administrator

Gazelle Global; Manchester; Hybrid; GBP 52,000 - 68,000; Full time

Job summary

Gazelle Global is seeking an experienced Splunk Administrator to support enterprise-scale Splunk environments in a financial services setting. The role is based in Manchester with hybrid work (2 days onsite).

Key responsibilities include managing Splunk Enterprise and/or Splunk Cloud, ITSI, data onboarding, dashboards, alerts, and proactive performance optimisation. Strong incident management, Linux expertise and scripting skills are required; cloud and security governance experience is valued.

Qualifications

• Experience administering Splunk Enterprise and/or Splunk Cloud.
• Production support for incidents, problems and changes.
• Knowledge of Linux and enterprise infrastructure.
• Experience with data onboarding and transformation in Splunk.
• Desirable: Splunk ES, ITSI, clustering.

Responsibilities

• Administer Splunk Enterprise and/or Splunk Cloud, including ITSI.
• Provide production support across incidents, problems and changes.
• Optimise data ingestion, indexing, searches and performance.
• Support upgrades, migrations, integrations and onboarding.
• Maintain dashboards, alerts, reports and SPL-based monitoring use cases.
• Troubleshoot complex Splunk and infrastructure issues; perform RCA.
• Collaborate with engineering, DevOps and application teams.
• Drive automation for reliability, scalability and efficiency.
• Ensure platform operations meet security, audit and governance.
• Splunk data onboarding, parsing and transformation.
• Linux and enterprise infrastructure knowledge.
• Production support and incident/change management experience.

Skills

Splunk Admin

ITSI

Splunk ES

Linux knowledge

Python scripting

Shell scripting

PowerShell scripting

Automation

Clustering

Security governance

Tools

Splunk Cloud

Job description

Location: Manchester (Hybrid – 2 days onsite)

Duration: 12 months

We’re looking for an experienced Splunk Administrator to support and optimise enterprise-scale Splunk environments within a financial services setting.

Key responsibilities:

• Administer Splunk Enterprise and/or Splunk Cloud, including ITSI.
• Provide production support across incidents, problems and changes.
• Optimise data ingestion, indexing, searches and platform performance.
• Support upgrades, migrations, integrations and onboarding of new workloads.
• Maintain dashboards, alerts, reports and SPL-based monitoring use cases.
• Troubleshoot complex Splunk and infrastructure issues and perform RCA.
• Collaborate with engineering, DevOps and application teams on monitoring and observability.
• Drive automation and improvements to reliability, scalability and efficiency.
• Ensure platform operations meet security, audit and governance requirements.
• Splunk data onboarding, parsing and transformation.
• Linux and enterprise infrastructure knowledge.
• Production support and incident/change management experience.
• Splunk ES, ITSI, distributed architecture or clustering highly desirable.
• Python, Shell or PowerShell scripting beneficial.
• Splunk certification advantageous.