Splunk Administrator,Senior Administrator

Burgeon It Services; Hyderabad, Pune District, Bengaluru; Hybrid; INR 1,500,000 - 2,300,000; Full time

Job summary

Burgeon It Services is seeking an experienced Splunk Administrator to operate as an L3 SME across Splunk Enterprise and Cloud environments in Hyderabad/Bangalore/Pune. You will design, deploy, and optimize distributed Splunk deployments and ingestions for large-scale data processing.

The role requires strong SPL development, Python/Shell scripting, and hands-on experience with AI/ML integrations using Splunk MLTK. Immediate to 30-day notice is expected for this contract-to-hire position.

Qualifications

• 12+ years of IT experience.
• 6+ years in Splunk administration or related roles.
• Contract-to-hire engagement with immediate-30 day notice.

Responsibilities

• Serve as L3 SME for Splunk Enterprise/Cloud with advanced troubleshooting and escalation management.
• Design, implement and manage distributed Splunk environments (Search Head/Indexer clusters, deployment servers, heavy forwarders, multi-site deployments).
• Lead tuning, capacity planning, index optimization, storage management and ingestion architecture for large-scale data.
• Develop SPL queries, dashboards, data models, CIM normalization, reports and enterprise monitoring solutions.
• Integrate Splunk with AWS, Azure, GCP, ServiceNow, Kafka, REST APIs and other enterprise apps for observability.
• Build Python, Shell and API-based automation for provisioning, health checks and alert enrichment.
• Develop AI/ML solutions using Splunk MLTK, Python, Pandas, TensorFlow for anomaly detection and predictive analytics.
• Lead RCAs of incidents, perform log forensics, predictive monitoring and AIOps implementations.
• Implement RBAC, LDAP/SAML/SSO, data retention policies and ES best practices; mentor L1/L2 teams.

Skills

Splunk Enterprise / Splunk Cloud

Search Head Clustering

Indexing Clustering

Advanced SPL Development

Linux Administration

Python & Shell Scripting

ML/AI Integration with Splunk

Job description

Position: Splunk Administrator

Work Location: Hyderabad/Bangalore/Pune

Total Experience: 12 Years

Relevant Experience: 6 Years

Job Type: Contract to Hire

Notice Period: Immediate-30 Days

Job Description

Splunk Administrator-L3 with AI/ML Coding:

serve as the L3 SME for Splunk Enterprise/Splunk Cloud, providing advanced troubleshooting, architecture support, and escalation management for complex platform issues.

Design, implement, and manage distributed Splunk environments, including Search Head Clusters, Indexer Clusters, Cluster Masters, Deployment Servers, Heavy Forwarders, and multi-site deployments.

Lead performance tuning, capacity planning, index optimization, storage management, and ingestion architecture for large-scale environments processing multiple TBs of data daily.

Develop complex SPL queries, dashboards, correlation searches, data models, CIM normalization, reports, and enterprise monitoring solutions to support operational and security requirements.

Integrate Splunk with AWS, Azure, GCP, ServiceNow, Kafka, REST APIs, Syslog, CMDB, monitoring tools, and enterprise applications to enable end-to-end observability.

Develop and maintain Python, Shell, and API-based automation frameworks for automated provisioning, health checks, remediation, alert enrichment, and operational efficiency.

Build and deploy AI/ML solutions using Splunk MLTK, Python, Pandas, NumPy, Scikit-learn, TensorFlow, and Generative AI technologies for anomaly detection, predictive analytics, and intelligent event correlation.

Lead root cause analysis of critical incidents, perform log forensics, predictive monitoring, capacity forecasting, and AIOps implementation to minimize service disruptions.

Implement and govern security controls, RBAC, LDAP/SAML/SSO integration, data retention policies, audit requirements, and Splunk Enterprise Security (ES) best practices.

Mentor L1/L2 teams, drive platform modernization initiatives, create technical standards and documentation, and collaborate with Infrastructure, Security, DevOps, and Application teams to deliver AI-driven observability and automation solutions.

Mandatory Skills

• Splunk Enterprise / Splunk Cloud (6+ years)
• Search Head Clustering & Indexer Clustering
• Advanced SPL Development
• Linux Administration
• Python & Shell Scripting
• Splunk MLTK
• AI/ML & Generative AI Integration