Remote Splunk Admin & Cribl Data Ingestion Lead

SFE; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

SFE is seeking a Senior Splunk Admin to lead enterprise data ingestion operations across Splunk and Cribl. You will act as the primary technical lead for ingestion onboarding, pipeline execution, monitoring, and troubleshooting while mentoring engineers.

Responsibilities include driving telemetry standards, governance, and automation for ingestion, monitoring, and incident response in production environments. This role offers remote work with on-call rotation.

Qualifications

• 8+ years IT experience, with 5+ years Splunk administration and data ingestion.
• Experience with enterprise-scale observability, logging, and monitoring.
• Hands-on Splunk and Cribl ingestion workflows, pipeline execution, and troubleshooting.
• Experience supporting production environments and critical incidents.

Responsibilities

• Lead Splunk and Cribl data ingestion initiatives across teams.
• Serve as primary contact for ingestion issues and stakeholders.
• Mentor engineers on ingestion best practices and operational excellence.
• Support onboarding, execution, monitoring, and maintenance of ingestion pipelines.
• Drive logging, telemetry, and data governance standards.
• Develop automation for ingestion, monitoring, and operations.
• Support incident management and 24x7 on-call operations.
• Ensure integration between ingestion platforms and observability tools and data lakes.

Skills

SPL

RegEx

Python/Bash/PowerShell

Cloud platforms (AWS/Azure/GCP)

Linux/Windows

24x7 on-call readiness

Education

Splunk Power User Certification

Tools

Cribl Stream

Splunk Enterprise/Cloud

Job description

SFE is seeking a Senior Splunk Admin to lead enterprise data ingestion operations across Splunk and Cribl. You will act as the primary technical lead for ingestion onboarding, pipeline execution, monitoring, and troubleshooting while mentoring engineers.

Responsibilities include driving telemetry standards, governance, and automation for ingestion, monitoring, and incident response in production environments. This role offers remote work with on-call rotation.