Splunk Administrator (VP2)

WhiteCrow Research; Kuala Lumpur; On-site; MYR 150,000 - 230,000; Full time

Job summary

WhiteCrow Research is seeking an experienced Splunk Administrator (VP2) to design, implement, administer, and maintain the enterprise Splunk platform across the global IT stack from Kuala Lumpur.

You will manage Search Head Clusters, Indexers, Deployment Servers, Universal Forwarders, License Management, and perform upgrades while optimizing performance, data onboarding, and automation using Python. Strong Linux, networking, and virtualization fundamentals are essential.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related discipline.
• 8+ years of IT experience with at least 3 years of hands-on Splunk Administration experience.
• Experience managing Search Head Clusters, Indexers, Deployment Servers, Universal Forwarders, and License Management.

Responsibilities

• Design, implement, administer, and maintain the enterprise Splunk platform.
• Manage supporting Splunk infrastructure components including Search Heads, Indexers, Deployment Servers, Heavy Forwarders, Universal Forwarders, Cluster Manager, License Manager, and Deployer.
• Configure and maintain Search Head Clusters and Indexer Clusters.
• Administer data onboarding, source type configuration, parsing, indexing, and data retention.
• Monitor Splunk platform health, performance, availability, and capacity.
• Perform Splunk upgrades, patching, migration, and infrastructure expansion.
• Optimize indexes, searches, data models, and platform performance.
• Develop automation scripts using Python or similar scripting languages.
• Integrate Splunk with various enterprise systems and data sources.
• Support troubleshooting and root cause analysis related to Splunk platform and data ingestion issues.
• Configure dashboards, reports, alerts, and knowledge objects as required.

Skills

Python scripting

Automation

Splunk SPL

Linux

Networking

Platform optimization

Education

Bachelor's Degree in Computer Science, IT, or related

Tools

Splunk

Search Head Clusters

Indexers

Deployment Servers

Universal Forwarders

License Management

Job description

We are global talent research, insight, and sourcing specialists with offices in the UK, USA, Singapore, Malaysia, Hong Kong, Dubai, and India. Our international reach has helped us to understand and penetrate specialist markets at a global level. In addition to this, our service is also extended to complement our client’s in-house talent acquisition teams.

About our client

Our Client operates in the Financial Services Industry, with its headquarters rooted strongly in Singapore. It has its branches spread to more than 15 countries, providing employment to more than 25,000 people all over the world. They fall in the Forbes Global 2000 (2022). Their core business is to offer financial services to its clients, ranging from Investment Banking to Corporate as well as Personal Banking Services.. They are also well known for their Residential Home Loan Business.

As a Splunk Administrator (VP2), you will be responsible for:

• Designing, implementing, administering, and maintaining the enterprise Splunk platform.
• Managing Splunk infrastructure components including Search Heads, Indexers, Deployment Servers, Heavy Forwarders, Universal Forwarders, Cluster Manager, License Manager, and Deployer.
• Configuring and maintaining Search Head Clusters and Indexer Clusters.
• Administering data onboarding, source type configuration, parsing, indexing, and data retention.
• Monitoring Splunk platform health, performance, availability, and capacity.
• Performing Splunk upgrades, patching, migration, and infrastructure expansion activities.
• Optimizing indexes, searches, data models, and platform performance.
• Developing automation scripts using Python or similar scripting languages.
• Integrating Splunk with various enterprise systems and data sources.
• Supporting troubleshooting and root cause analysis related to Splunk platform and data ingestion issues.
• Configuring dashboards, reports, alerts, and knowledge objects as required.

What you already have...

• Bachelor's Degree in Computer Science, Information Technology, or related discipline.
• Minimum 8+ years of IT experience with at least 3 years of hands-on Splunk Administration experience.
• Strong experience managing:
• Search Head Clusters
• Indexer Clusters
• Deployment Servers
• Universal Forwarders
• License Management
• Strong understanding of Splunk architecture, deployment models, and platform sizing.
• Experience with Splunk upgrades, platform scaling, and infrastructure lifecycle management.
• Expertise in Splunk SPL and platform performance tuning.
• Experience onboarding and integrating diverse log sources into Splunk.
• Strong understanding of Linux, networking, virtualization, storage, and enterprise infrastructure.