Splunk Admin

Ztek Consulting INC; United States; Presencial; USD 120.000 - 150.000; Jornada completa

Descripción de la vacante

Ztek Consulting INC is seeking an experienced Splunk Administrator to lead enterprise data ingestion across Splunk and Cribl platforms. You will act as the primary technical lead for ingestion onboarding, pipeline execution, monitoring, troubleshooting, governance, and operational support while mentoring engineers and driving telemetry standards.

Ideal candidates have 5+ years of hands-on Splunk administration, data ingestion, and strong scripting skills in Python, Bash, or PowerShell.

Formación

• 8+ years of IT experience.
• 5+ years of hands-on Splunk administration and data ingestion experience.
• Experience with enterprise-scale observability, logging and monitoring platforms.
• Hands-on Splunk and Cribl data ingestion workflows and troubleshooting.
• Splunk Power User Certification is mandatory.

Responsabilidades

• Lead all Splunk and Cribl data ingestion initiatives across teams.
• Serve as the primary contact for ingestion-related technical issues and stakeholder engagement.
• Mentor engineers on ingestion best practices, troubleshooting, and operational excellence.
• Support onboarding, execution, monitoring, and maintenance of ingestion pipelines.
• Drive logging, telemetry, and data governance standards.
• Develop automation for ingestion, monitoring, and operational activities.
• Support incident management, root cause analysis, and 24x7 on-call operations.
• Ensure integration between ingestion platforms and observability tools, dashboards, alerting systems, and data lakes.

Conocimientos

SPL

RegEx

Python

Bash

PowerShell

Splunk Enterprise/Cloud

Cribl Stream

Data onboarding

Observability

On-call rotation

Telemetry standards

Herramientas

Splunk

Cribl

Descripción del empleo

Job Description

Splunk Admin

Experience

8+ years of IT experience.

5+ years of hands-on Splunk administration and data ingestion experience.

Proven experience with enterprise-scale observability, logging, and monitoring platforms.

Hands-on experience with Splunk and Cribl ingestion workflows, pipeline execution, and troubleshooting

Technical Skills

Splunk Enterprise and/or Splunk Cloud.

Splunk data onboarding, parsing, routing, indexing, and forwarding.

Cribl Stream administration, pipeline execution, monitoring, and support.

Strong proficiency in:

• o SPL
• o RegEx
• o Python, Bash, or PowerShell

Knowledge of networking, Linux/Windows, cloud platforms (AWS/Azure/GCP), and security fundamentals.

Experience supporting production environments and critical incidents.

Willingness to participate in a 24x7 on-call rotation.

Certifications

Splunk Power User Certification (Mandatory).

Role Summary

Lead enterprise data ingestion operations across Splunk and Cribl platforms. Act as the primary technical lead for ingestion onboarding, pipeline execution, monitoring, troubleshooting, governance, and operational support while mentoring engineers and driving telemetry standards

Key Responsibilities

• Lead all Splunk and Cribl data ingestion initiatives across teams.
• Serve as the primary contact for ingestion-related technical issues and stakeholder engagement.
• Mentor engineers on ingestion best practices, troubleshooting, and operational excellence.
• Support onboarding, execution, monitoring, and maintenance of ingestion pipelines.
• Drive logging, telemetry, and data governance standards.
• Develop automation for ingestion, monitoring, and operational activities.
• Support incident management, root cause analysis, and 24x7 on-call operations.
• Ensure seamless integration between ingestion platforms and observability tools, dashboards, alerting systems, and data lakes.

Leadership & Communication

• Experience leading technical discussions with clients and stakeholders.
• Proven mentoring and coaching experience for junior engineers and analysts.
• Strong verbal and written communication skills.