TCS Opportunity Splunk Admin

Tata Consultancy Services; Gurugram District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Tata Consultancy Services is seeking a Splunk Administrator to manage and optimize a Splunk Enterprise deployment. You will handle installation, configuration, upgrades, and day-to-day operations of Search Heads, Indexers, and Forwarders, while enforcing RBAC and secure access across the environment.

The role requires strong troubleshooting skills, networking basics, and a Splunk Enterprise Certified Admin certification.

Qualifications

• Hands-on experience administering Splunk Enterprise environments including installation, configuration, upgrades, and day‑to‑day operations of Search Heads, Indexers, and Forwarders.
• Strong expertise in designing and managing Splunk RBAC, including roles, capabilities, indexes, and user authentication.
• Must possess Splunk Enterprise Certified Admin certification.
• Good understanding of networking basics such as ports, protocols, and firewall rules for Splunk data ingestion and distributed architecture.
• Proven ability to troubleshoot Splunk ingestion, search, performance, and access issues in production environments.
• Good-to-have SPL Knowledge and Monitoring & Alerting.

Responsibilities

• Manage and administer Splunk Enterprise platform, ensuring optimal performance and high availability.
• Configure and maintain Splunk RBAC to enforce role-based access and secure data visibility.
• Collaborate with infrastructure and network teams for proper port, protocol, and firewall configurations.
• Perform health checks, upgrades, backups, and license monitoring of Splunk environments.
• Provide L2/L3 operational support and participate in incident resolution and root cause analysis.

Skills

Splunk administration

RBAC design & management

Networking basics

Troubleshooting

SPL knowledge

Monitoring & alerting

Education

Splunk Enterprise Certified Admin

Job description

Hands‑on experience administering Splunk Enterprise environments including installation, configuration, upgrades, and day‑to‑day operations of Search Heads, Indexers, and Forwarders.

Splunk RBAC (Role-Based Access Control)

Strong expertise in designing and managing Splunk RBAC, including roles, capabilities, indexes, and user authentication to ensure secure and compliant access

Must possess Splunk Enterprise Certified Admin certification, demonstrating in-depth understanding of Splunk core administration concepts and best practices.

Good understanding of networking basics such as ports, protocols (TCP/UDP/HTTP/HTTPS), and firewall rules required for Splunk data ingestion and distributed architecture.

Operational Support & Troubleshooting

Proven ability to troubleshoot Splunk ingestion, search, performance, and access issues, ensuring system stability and availability in production environments.

Good-to-Have

• SPL Knowledge
• Monitoring & Alerting

SN

Responsibility of / Expectations from the Role

1

Manage and administer Splunk Enterprise platform, ensuring optimal performance and high availability.

2

Configure and maintain Splunk RBAC to enforce role-based access and secure data visibility.

3

Work with infrastructure and network teams to ensure proper port, protocol, and firewall configurations.

4

Perform regular health checks, upgrades, backups, and license monitoring of Splunk environments.

5

Provide L2/L3 operational support and participate in incident resolution and root cause analysis.

Qualification. *Only Full-Time Education would be considered.