Splunk Engineer

Ciel HR; India; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Ciel HR is seeking a seasoned Splunk Administrator to manage distributed Splunk environments, data onboarding, and dashboarding. The role covers SPL development, ES/SIEM integration, and platform reliability across production systems.

The ideal candidate will have strong scripting skills (Python/Bash/PowerShell), Linux/Unix expertise, and a track record in incident, change, and RCA-driven improvements. Strong collaboration with IT teams is required.

Qualifications

• Strong hands-on experience in Splunk Enterprise Administration and distributed Splunk environments.
• Expertise in SPL, data onboarding, index management, dashboards, alerts, and troubleshooting.
• Experience with Splunk Enterprise Security (ES), SIEM, security event monitoring, and correlation searches.
• Knowledge of ITSM processes, including incident management, problem management, and change management.
• Experience with SRE practices, platform monitoring, performance optimization, availability management, and RCA.
• Working knowledge of Linux/Unix administration and command-line operations.
• Scripting knowledge in Python, Bash, or PowerShell for automation.
• Understanding of networking, log sources, data pipelines, and enterprise infrastructure.
• Experience in capacity planning, platform health monitoring, and production support.

Skills

Distributed systems

ITSM processes

SRE practices

Root Cause Analysis (RCA)

Python/Bash/PowerShell scripting

Networking knowledge

Tools

Splunk Enterprise

SPL

Linux/Unix

Job description

Required Technical Skills

• Strong hands-on experience in Splunk Enterprise Administration and distributed Splunk environments.
• Expertise in SPL, data onboarding, index management, dashboards, alerts, and troubleshooting.
• Experience with Splunk Enterprise Security (ES), SIEM, security event monitoring, and correlation searches.
• Knowledge of ITSM processes, including incident management, problem management, and change management.
• Experience with SRE practices, platform monitoring, performance optimization, availability management, and RCA.
• Working knowledge of Linux/Unix administration and command-line operations.
• Scripting knowledge in Python, Bash, or PowerShell for automation.
• Understanding of networking, log sources, data pipelines, and enterprise infrastructure.
• Experience in capacity planning, platform health monitoring, and production support.

Preferred Skills

• Splunk Certified Administrator or relevant Splunk certifications.
• Experience with Splunk IT Service Intelligence (ITSI), Prometheus, or Grafana.
• Exposure to Ansible, Terraform, CI/CD pipelines, and infrastructure automation.
• Knowledge of cloud platforms such as AWS, Azure, or GCP.
• Familiarity with Kafka and data-streaming technologies.
• Experience defining SLOs, SLIs, and service reliability metrics.

Mandatory Skills

Splunk Enterprise Administration, Splunk Enterprise Security (ES), SIEM, SPL, Data Onboarding, Indexers, Search Heads, Forwarders, Linux/Unix, ITSM, Incident Management, Problem Management, Change Management, SRE, Platform Monitoring, Performance Tuning, Root Cause Analysis (RCA), Python/Bash/PowerShell Scripting.