Splunk Admin

SFE; United States; A distancia; USD 120.000 - 160.000; Jornada completa

Descripción de la vacante

SFE is seeking a Senior Splunk Admin to lead enterprise data ingestion operations across Splunk and Cribl. You will act as the primary technical lead for ingestion onboarding, pipeline execution, monitoring, and troubleshooting while mentoring engineers.

Responsibilities include driving telemetry standards, governance, and automation for ingestion, monitoring, and incident response in production environments. This role offers remote work with on-call rotation.

Formación

• 8+ years IT experience, with 5+ years Splunk administration and data ingestion.
• Experience with enterprise-scale observability, logging, and monitoring.
• Hands-on Splunk and Cribl ingestion workflows, pipeline execution, and troubleshooting.
• Experience supporting production environments and critical incidents.

Responsabilidades

• Lead Splunk and Cribl data ingestion initiatives across teams.
• Serve as primary contact for ingestion issues and stakeholders.
• Mentor engineers on ingestion best practices and operational excellence.
• Support onboarding, execution, monitoring, and maintenance of ingestion pipelines.
• Drive logging, telemetry, and data governance standards.
• Develop automation for ingestion, monitoring, and operations.
• Support incident management and 24x7 on-call operations.
• Ensure integration between ingestion platforms and observability tools and data lakes.

Conocimientos

SPL

RegEx

Python/Bash/PowerShell

Cloud platforms (AWS/Azure/GCP)

Linux/Windows

24x7 on-call readiness

Educación

Splunk Power User Certification

Herramientas

Cribl Stream

Splunk Enterprise/Cloud

Descripción del empleo

Job Title - Splunk Admin

Location - Remote

8+ years of experience

Fulltime

Job Description

Splunk Admin

Experience

8+ years of IT experience.

5+ years of hands-on Splunk administration and data ingestion experience.

Proven experience with enterprise-scale observability, logging, and monitoring platforms.

Hands-on experience with Splunk and Cribl ingestion workflows, pipeline execution, and troubleshooting

Technical Skills

Splunk Enterprise and/or Splunk Cloud.

Splunk data onboarding, parsing, routing, indexing, and forwarding.

Cribl Stream administration, pipeline execution, monitoring, and support.

Strong proficiency in:

• SPL
• RegEx
• Python, Bash, or PowerShell

Knowledge of networking, Linux/Windows, cloud platforms (AWS/Azure/GCP), and security fundamentals.

Experience supporting production environments and critical incidents.

Willingness to participate in a 24x7 on-call rotation.

Certifications

Splunk Power User Certification (Mandatory).

Role Summary

Lead enterprise data ingestion operations across Splunk and Cribl platforms. Act as the primary technical lead for ingestion onboarding, pipeline execution, monitoring, troubleshooting, governance, and operational support while mentoring engineers and driving telemetry standards

Key Responsibilities

• Lead all Splunk and Cribl data ingestion initiatives across teams.
• Serve as the primary contact for ingestion-related technical issues and stakeholder engagement.
• Mentor engineers on ingestion best practices, troubleshooting, and operational excellence.
• Support onboarding, execution, monitoring, and maintenance of ingestion pipelines.
• Drive logging, telemetry, and data governance standards.
• Develop automation for ingestion, monitoring, and operational activities.
• Support incident management, root cause analysis, and 24x7 on-call operations.
• Ensure seamless integration between ingestion platforms and observability tools, dashboards, alerting systems, and data lakes.