Splunk Developer & Administrator

Tata Consultancy Services; Hyderabad, Chennai District, Bengaluru; On-site; INR 2,500,000 - 3,500,000; Full time

Job summary

Tata Consultancy Services Hyderabad is hiring a Splunk Developer & Administrator to design and maintain advanced Splunk dashboards, queries, and alerts, integrating data from multiple sources. You will onboard data via forwarders, APIs, and scripts, ensure data quality, and work with security teams on logging standards.

Strong skills in SPL, Python, Cribl, and DevOps tooling are essential to optimize performance, implement RBAC, and support incident analysis through scalable automation.

Qualifications

• Experience with designing Splunk dashboards, queries and alerts.
• Experience onboarding data from syslog, APIs and cloud services.
• Strong scripting skills in Python, Bash or PowerShell.

Responsibilities

• Design, develop, and maintain Splunk dashboards, queries, and alerts.
• Onboard new data sources into Splunk using forwarders or APIs.
• Collaborate with security and IT teams to define logging standards.
• Optimize Splunk performance, indexing, parsing and retention.
• Implement RBAC and data models for secure access.
• Assist incident response and root cause analysis with Splunk.
• Automate Splunk deployments with Ansible, Terraform or CI/CD.

Skills

Splunk

Python

Cribl

SPL

Data onboarding

Bash

PowerShell

Troubleshooting

CI/CD pipelines

Tools

Git

Jenkins

Ansible

Terraform

Job description

Role & responsibilities

Required Information Details

1. Role Splunk Developer & Administrator
2. Required Technical Skill Set Splunk, Python, Cribl
3. No. of Requirements 1
4. Desired Experience Range 8 to 10 years of experience
5. Location of Requirement

Desired Competencies (Technical/Behavioral Competency)

1. Strong knowledge of SPL (Search Processing Language).
2. Strong knowledge on IRs and Notables of SIEM and ITSI
3. Experience with onboarding data from various sources (syslog, APIs, cloud services, etc.).
4. Proficiency in scripting languages (Python, Bash, PowerShell).
5. Familiarity with DevOps tools (Git, Jenkins, Ansible, Terraform).
6. Should have good troubleshooting experience.

Good-to-Have Splunk certifications and Experience with Cribl and AppDynamics

SN Role descriptions / Expectations from the Role

1. Design, develop, and maintain complex Splunk dashboards, queries, and alerts.
2. Onboard new data sources into Splunk using forwarders, APIs, or custom scripts and Develop and maintain Splunk apps and technology add-ons (TAs).
3. Collaborate with security, infrastructure, and application teams to define logging standards and ensure data quality.
4. Optimize Splunk performance and manage indexing, parsing, and retention policies.
5. Implement and maintain role-based access controls (RBAC) and data models.
6. Support incident response and root cause analysis using Splunk.
7. Automate Splunk deployments and configurations using tools like Ansible, Terraform, or CI/CD pipelines.
8. Strong communication and collaboration skills.