Splunk Admin

Suitable AI; Gurugram District; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

Suitable AI is seeking an experienced Splunk Administrator to maintain and optimize our Splunk ecosystem, design scalable solutions, and ensure platform stability and performance.

You will handle data onboarding, forwarders, indexing, and licensing, automate tasks with Python or Bash, and collaborate with IT and security teams in a fast-moving environment.

Qualifications

• Strong hands-on experience with Splunk Enterprise administration.
• Deep understanding of Splunk architecture, deployment, and best practices.
• Experience with data ingestion, forwarders, indexing, and search optimization.
• Proficiency in Linux/Unix administration.
• Strong scripting skills in Python and/or Shell (Bash).
• Experience with regular expressions and automation frameworks.
• Knowledge of ITSM tools such as BMC Helix or ServiceNow .
• Experience in incident, problem, and change management processes.

Responsibilities

• Install, configure, administer, and maintain the Splunk platform.
• Manage data onboarding, forwarders, indexes, user roles, and licensing.
• Monitor platform health and troubleshoot performance or availability issues.
• Develop and maintain dashboards, reports, alerts, and visualizations.
• Automate operational activities using scripting and tooling.
• Support Linux-based environments and participate in production support activities.
• Collaborate with cross-functional teams to address operational and business requirements.
• Ensure compliance with security, governance, and operational standards.

Skills

Splunk Enterprise administration

Splunk architecture & deployment

Data ingestion & indexing

Linux/Unix administration

Python / Shell scripting

Regular expressions & automation

ITSM tools (BMC Helix ServiceNow)

Incident/Problem/Change management

Tools

Splunk Enterprise

Linux/Unix

Python

Job description

We are looking for an experienced Splunk Administrator with strong expertise in Splunk platform administration, monitoring, automation, production support, and solution design. The candidate will be responsible for maintaining and optimizing the Splunk ecosystem, designing scalable and efficient solutions, and ensuring platform stability, performance, and operational excellence.

Key Responsibilities

• Install, configure, administer, and maintain the Splunk platform.
• Manage data onboarding, forwarders, indexes, user roles, and licensing.
• Monitor platform health and troubleshoot performance or availability issues.
• Develop and maintain dashboards, reports, alerts, and visualizations.
• Automate operational activities using scripting and tooling.
• Support Linux-based environments and participate in production support activities.
• Collaborate with cross-functional teams to address operational and business requirements.
• Ensure compliance with security, governance, and operational standards.

Required Technical Skills

• Strong hands-on experience with Splunk Enterprise administration.
• Deep understanding of Splunk architecture, deployment, and best practices.
• Experience with data ingestion, forwarders, indexing, and search optimization.
• Proficiency in Linux/Unix administration.
• Strong scripting skills in Python and/or Shell (Bash).
• Experience with regular expressions and automation frameworks.
• Knowledge of ITSM tools such as BMC Helix or ServiceNow .
• Experience in incident, problem, and change management processes.

Preferred Qualifications

• Experience supporting large-scale enterprise environments.
• Knowledge of monitoring, observability, and security use cases.
• Familiarity with Agile delivery models.

Soft Skills

• Excellent troubleshooting and analytical skills.
• Strong communication and stakeholder management abilities.
• Ability to work independently and within distributed teams.
• Strong ownership and proactive problem-solving mindset.
• Ability to design solutions and provide technical guidance aligned with business requirements.