Splunk Admin

Acestack; United States; Remote; USD 120,000 - 180,000; Full time

Job summary

Acestack is seeking a highly experienced Splunk Admin to lead data ingestion across Splunk and Cribl. This role requires deep expertise in Splunk, Cribl workflows, and on-call support for production environments.

Remote-eligible, full-time position with focus on enterprise observability, logging, and monitoring. Strong scripting, networking, and cloud knowledge are essential.

Qualifications

• 8+ years of IT experience.
• 5+ years of hands-on Splunk administration and data ingestion experience.
• Proven experience with enterprise-scale observability, logging, and monitoring platforms.
• Hands-on experience with Splunk and Cribl ingestion workflows, pipeline execution, and troubleshooting

Responsibilities

• Lead Splunk and Cribl data ingestion initiatives across teams.
• Serve as the primary contact for ingestion-related technical issues and stakeholder engagement.
• Mentor engineers on ingestion best practices, troubleshooting, and operational excellence.
• Support onboarding, execution, monitoring, and maintenance of ingestion pipelines.
• Drive logging, telemetry, and data governance standards.
• Develop automation for ingestion, monitoring, and operational activities.
• Support incident management, root cause analysis, and 24x7 on-call operations.
• Ensure seamless integration between ingestion platforms and observability tools, dashboards, alerting systems, and data lakes.

Skills

Splunk

Cribl

SPL

RegEx

Python

Bash/PowerShell

Linux/Windows

Cloud platforms

On-call rotation

Tools

Splunk Enterprise

Splunk Cloud

Cribl Stream

Job description

Job Title: Splunk Admin

Location: Remote

Full Time

Splunk Admin

Experience

8+ years of IT experience.

5+ years of hands-on Splunk administration and data ingestion experience.

Proven experience with enterprise-scale observability, logging, and monitoring platforms.

Hands-on experience with Splunk and Cribl ingestion workflows, pipeline execution, and troubleshooting

Technical Skills

• Splunk Enterprise and/or Splunk Cloud.
• Splunk data onboarding, parsing, routing, indexing, and forwarding.
• Cribl Stream administration, pipeline execution, monitoring, and support.
• Strong proficiency in:
  • SPL
  • RegEx
  • Python, Bash, or PowerShell
• Knowledge of networking, Linux/Windows, cloud platforms (AWS/Azure/GCP), and security fundamentals.
• Experience supporting production environments and critical incidents.
• Willingness to participate in a 24x7 on-call rotation.

Certifications

Splunk Power User Certification (Mandatory).

Role Summary

Lead enterprise data ingestion operations across Splunk and Cribl platforms. Act as the primary technical lead for ingestion onboarding, pipeline execution, monitoring, troubleshooting, governance, and operational support while mentoring engineers and driving telemetry standards

Key Responsibilities

• Lead all Splunk and Cribl data ingestion initiatives across teams.
• Serve as the primary contact for ingestion-related technical issues and stakeholder engagement.
• Mentor engineers on ingestion best practices, troubleshooting, and operational excellence.
• Support onboarding, execution, monitoring, and maintenance of ingestion pipelines.
• Drive logging, telemetry, and data governance standards.
• Develop automation for ingestion, monitoring, and operational activities.
• Support incident management, root cause analysis, and 24x7 on-call operations.
• Ensure seamless integration between ingestion platforms and observability tools, dashboards, alerting systems, and data lakes.

Leadership & Communication

• Experience leading technical discussions with clients and stakeholders.
• Proven mentoring and coaching experience for junior engineers and analysts.
• Strong verbal and written communication skills.