Splunk Admin

Realign Llc; Illinois; Remote; USD 100,000 - 140,000; Full time

Job summary

Realign Llc is seeking a Senior Splunk Admin to lead enterprise data ingestion across Splunk and Cribl platforms. You will be the technical lead for ingestion onboarding, pipeline execution, monitoring, and troubleshooting while mentoring engineers to uphold telemetry standards.

The role requires hands-on Splunk and Cribl expertise, strong scripting skills, and experience with cloud platforms. Remote, full-time position with exposure to on-call responsibilities and production support.

Qualifications

• 5+ years of hands-on Splunk administration and data ingestion experience.
• Experience with enterprise-scale observability, logging, and monitoring platforms.
• Hands-on experience with Splunk and Cribl ingestion workflows, pipeline execution, and troubleshooting.

Responsibilities

• Lead Splunk and Cribl data ingestion initiatives across teams.
• Serve as primary contact for ingestion-related issues and stakeholder engagement.
• Mentor engineers on ingestion best practices, troubleshooting, and operational excellence.
• Support onboarding, execution, monitoring, and maintenance of ingestion pipelines.
• Drive logging, telemetry, and data governance standards.
• Develop automation for ingestion, monitoring, and operational activities.
• Support incident management, root cause analysis, and 24x7 on-call operations.
• Ensure seamless integration between ingestion platforms and observability tools, dashboards, alerting systems, and data lakes.

Skills

Splunk administration

Data ingestion

Observability

Cribl ingestion

Python

Bash

PowerShell

Networking

Linux

Windows

AWS

Azure

GCP

On-call rotation

Tools

Splunk Enterprise

Splunk Cloud

Cribl Stream

Job description

Experience

• 5+ years of hands-on Splunk administration and data ingestion experience.
• Proven experience with enterprise-scale observability, logging, and monitoring platforms.
• Hands-on experience with Splunk and Cribl ingestion workflows, pipeline execution, and troubleshooting

Technical Skills

• Splunk Enterprise and/or Splunk Cloud.
• Splunk data onboarding, parsing, routing, indexing, and forwarding.
• Cribl Stream administration, pipeline execution, monitoring, and support.
• Strong proficiency in:
  • SPL
  • RegEx
  • Python, Bash, or PowerShell
• Knowledge of networking, Linux/Windows, cloud platforms (AWS/Azure/GCP), and security fundamentals.
• Experience supporting production environments and critical incidents.
• Willingness to participate in a 24x7 on-call rotation.

Certifications

• Splunk Power User Certification (Mandatory).

Role Summary

Lead enterprise data ingestion operations across Splunk and Cribl platforms. Act as the primary technical lead for ingestion onboarding, pipeline execution, monitoring, troubleshooting, governance, and operational support while mentoring engineers and driving telemetry standards

Key Responsibilities

• Lead all Splunk and Cribl data ingestion initiatives across teams.
• Serve as the primary contact for ingestion-related technical issues and stakeholder engagement.
• Mentor engineers on ingestion best practices, troubleshooting, and operational excellence.
• Support onboarding, execution, monitoring, and maintenance of ingestion pipelines.
• Drive logging, telemetry, and data governance standards.
• Develop automation for ingestion, monitoring, and operational activities.
• Support incident management, root cause analysis, and 24x7 on-call operations.
• Ensure seamless integration between ingestion platforms and observability tools, dashboards, alerting systems, and data lakes.

Leadership & Communication

• Experience leading technical discussions with clients and stakeholders.
• Proven mentoring and coaching experience for junior engineers and analysts.
• Strong verbal and written communication skills.

Job Details

• Job Title: Splunk Admin
• Location: Remote
• Full Time
• Experience: 8+ years of IT experience.