Splunk Administrator

Private Advertiser; Kuala Lumpur; On-site; MYR 120,000 - 180,000; Full time

Job summary

Private Advertiser in Malaysia seeks an experienced Splunk Administrator to design, implement, administer, and maintain the enterprise Splunk platform across the organization.

The role requires 8+ years IT experience with at least 5 years hands-on Splunk Administration, strong knowledge of Search Head and Indexer clusters, data onboarding, and platform optimization. Proficiency in Python and REST APIs is preferred.

Qualifications

• Bachelor's degree in CS/IT or related field.
• 8+ years IT experience with 5+ years hands-on Splunk Admin experience.
• Strong experience managing Search Head Clusters, Indexer Clusters, Deployment Servers, Heavy Forwarders, Universal Forwarders, and License Management.

Responsibilities

• Design, implement, administer, and maintain the enterprise Splunk platform.
• Manage Splunk components including Search Heads, Indexers, Deployment Servers, Heavy Forwarders, Universal Forwarders, Cluster Manager, License Manager, and Deployer.
• Configure and maintain Search Head Clusters and Indexer Clusters.
• Administer data onboarding, source type configuration, parsing, indexing, and data retention.
• Monitor platform health, performance, availability, and capacity.
• Perform upgrades, patching, migration, and infrastructure expansion.
• Optimize indexes, searches, data models, and platform performance.
• Develop automation scripts using Python or similar scripting languages.
• Integrate Splunk with various enterprise systems and data sources.
• Support troubleshooting and root cause analysis for Splunk platform and data ingestion.

Skills

Splunk Administration

SPL

Linux

Networking

Python

Automation

REST APIs

System Design

Education

Bachelor's Degree in Computer Science/Information Technology or related field

Job description

Design, implement, administer, and maintain the enterprise Splunk platform. Manage Splunk infrastructure components and optimize platform performance across the organization.

Key responsibilities

Design, implement, administer, and maintain the enterprise Splunk platform.

Manage Splunk infrastructure components including Search Heads, Indexers, Deployment Servers, Heavy Forwarders, Universal Forwarders, Cluster Manager, License Manager, and Deployer.

Configure and maintain Search Head Clusters and Indexer Clusters.

Administer data onboarding, source type configuration, parsing, indexing, and data retention.

Monitor Splunk platform health, performance, availability, and capacity.

Perform Splunk upgrades, patching, migration, and infrastructure expansion activities.

Optimize indexes, searches, data models, and platform performance.

Develop automation scripts using Python or similar scripting languages.

Integrate Splunk with various enterprise systems and data sources.

Support troubleshooting and root cause analysis related to Splunk platform and data ingestion issues.

About you

Bachelor's Degree in Computer Science, Information Technology, or related discipline.

Minimum 8 years of IT experience with at least 5 years of hands‑on Splunk Administration experience.

Strong experience managing Search Head Clusters, Indexer Clusters, Deployment Servers, Heavy Forwarders, Universal Forwarders, and License Management.

Strong understanding of Splunk architecture, deployment models, and platform sizing.

Experience with Splunk upgrades, platform scaling, and infrastructure lifecycle management.

Expertise in Splunk SPL and platform performance tuning.

Experience onboarding and integrating diverse log sources into Splunk.

Strong understanding of Linux, networking, virtualization, storage, and enterprise infrastructure.

Splunk Certified Admin (preferred).

Experience with Python, REST APIs, or automation scripting (preferred).