Splunk Administrator,Splunk Administration

Burgeon It Services; Hyderabad, Pune District, Bengaluru; Hybrid; INR 1,500,000 - 2,100,000; Full time

Job summary

Burgeon It Services is seeking an experienced Splunk Administrator to serve as L3 SME for Splunk Enterprise and Splunk Cloud. You will design, implement and manage distributed Splunk environments across SHC, Indexer Clusters and deployment servers, while driving performance, capacity planning and data ingestion architecture for large-scale data.

You will develop complex SPL queries, dashboards, and data models, integrate with AWS/Azure/GCP, ServiceNow, Kafka, and REST APIs, and build automation

Qualifications

• L3 SME for Splunk Enterprise/Splunk Cloud with 6+ years experience.
• Advanced troubleshooting, architecture support and escalation management for complex Splunk issues.
• Design, implement and manage distributed Splunk environments including SHC,Indexer Clusters and deployment servers.
• Lead performance tuning, capacity planning, and ingestion architecture for large data workloads.
• Develop SPL queries, dashboards, data models and enterprise monitoring solutions for ops and security.
• Integrate Splunk with AWS, Azure, GCP, ServiceNow, Kafka and REST APIs for end-to-end observability.
• Develop automation in Python/Shell for provisioning, health checks and remediation.
• Build AI/ML solutions using MLTK and Generative AI for anomaly detection and correlation.
• Lead RCA, log forensics, predictive monitoring and AIOps initiatives.

Responsibilities

• Provide expert Splunk operational support and optimization.
• Architect and maintain multi-site Splunk deployments.
• Create and optimize dashboards, reports, and CIM-compliant data models.
• Automate provisioning, health checks and alert enrichment.
• Collaborate with Security, DevOps and Infra teams on observability initiatives.
• Mentor L1/L2 teams and drive platform modernization initiatives.

Skills

Splunk Enterprise / Splunk Cloud

Search Head Clustering

Indexing Clustering

SPL Development

Linux Administration

Python & Shell Scripting

Splunk MLTK

AI/ML Integration

Tools

AWS

Azure

GCP

ServiceNow

Kafka

Job description

Position: Splunk Administrator

Work Location: Hyderabad/Bangalore/Pune

Total Experience: 12 Years

Relevant Experience: 6 Years

Job Type: Contract to Hire

Notice Period: Immediate-30 Days

Job Description:

Splunk Administrator-L3 with AI/ML Coding:

serve as the L3 SME for Splunk Enterprise/Splunk Cloud, providing advanced troubleshooting, architecture support, and escalation management for complex platform issues.

Design, implement, and manage distributed Splunk environments, including Search Head Clusters, Indexer Clusters, Cluster Masters, Deployment Servers, Heavy Forwarders, and multi-site deployments.

Lead performance tuning, capacity planning, index optimization, storage management, and ingestion architecture for large-scale environments processing multiple TBs of data daily.

Develop complex SPL queries, dashboards, correlation searches, data models, CIM normalization, reports, and enterprise monitoring solutions to support operational and security requirements.

Integrate Splunk with AWS, Azure, GCP, ServiceNow, Kafka, REST APIs, Syslog, CMDB, monitoring tools, and enterprise applications to enable end-to-end observability.

Develop and maintain Python, Shell, and API-based automation frameworks for automated provisioning, health checks, remediation, alert enrichment, and operational efficiency.

Build and deploy AI/ML solutions using Splunk MLTK, Python, Pandas, NumPy, Scikit-learn, TensorFlow, and Generative AI technologies for anomaly detection, predictive analytics, and intelligent event correlation.

Lead root cause analysis of critical incidents, perform log forensics, predictive monitoring, capacity forecasting, and AIOps implementation to minimize service disruptions.

Implement and govern security controls, RBAC, LDAP/SAML/SSO integration, data retention policies, audit requirements, and Splunk Enterprise Security (ES) best practices.

Mentor L1/L2 teams, drive platform modernization initiatives, create technical standards and documentation, and collaborate with Infrastructure, Security, DevOps, and Application teams to deliver AI-driven observability and automation solutions.

Mandatory Skills:

• Splunk Enterprise / Splunk Cloud (6+ years)
  Search Head Clustering & Indexer Clustering
  Advanced SPL Development
  Linux Administration
  Python & Shell Scripting
  Splunk MLTK
  AI/ML & Generative AI Integration