Splunk Administrator

Police and Fire Federal Credit Union; Bensalem Township (Bucks County); In loco; USD 110.000 - 150.000; Tempo pieno

Vantaggi offerti da questo lavoro

Excellent medical, dental, vision plan

401K with 6% company match

Paid time off

Descrizione del lavoro

Police and Fire Federal Credit Union seeks an experienced Information Technology Professional to manage, secure, maintain, and optimize its Splunk environment. The role covers security monitoring, IT operations, data ingestion, dashboards, alerts, troubleshooting, and compliance.

The ideal candidate has 5+ years with Splunk Enterprise, strong analytics, and experience with distributed deployments and admin of core Splunk components.

Competenze

• 5+ years of experience with Splunk Enterprise.
• Knowledge of Splunk architecture, distributed deployments, and configuration files.
• Experience administering Indexers, Search Heads, Forwarders, and Deployment Servers.
• Experience onboarding and troubleshooting diverse data sources.
• Strong analytical, troubleshooting, communication, and documentation skills.

Mansioni

• Administer Splunk Search Heads, Indexers, Forwarders, Deployment Servers, and clustered environments.
• Install, configure, upgrade, patch, and monitor Splunk infrastructure.
• Onboard and troubleshoot data from servers, applications, network devices, security tools, cloud platforms, and databases.
• Manage indexes, retention, storage, licensing, users, roles, authentication, and access controls.
• Develop and maintain searches, dashboards, reports, alerts, and security monitoring use cases.
• Optimize search performance, system health, capacity, availability, and licensing.
• Integrate Splunk with security and enterprise platforms through APIs and automation.
• Support SOC investigations, incident response, compliance, and audits.

Conoscenze

Splunk Enterprise

Distributed deployments

Indexers

Search Heads

Forwarders

Deployment Servers

Data onboarding

Dashboards

Alerts

Security monitoring

ITIL

Descrizione del lavoro

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Information Technology Professional Bensalem, PA, US

2 days ago Requisition ID: 2237

Competitive Base Salary - Experience Required

****EXCELLENT MEDICAL, DENTAL, VISION BENEFITS: 75% to 90% of premiums covered by PFFCU***** ****401K – PFFCU contributes automatic 6% regardless of employee contribution after 1 year*****

********Great benefits, paid time off, and more! Become a part of the team today!******

Role Overview

Manage, secure, maintain, and optimize the organization’s Splunk environment supporting security monitoring, IT operations, data ingestion, dashboards, alerts, troubleshooting, and compliance.

Key Responsibilities

• Administer Splunk Search Heads, Indexers, Forwarders, Deployment Servers, and clustered environments.
• Install, configure, upgrade, patch, and monitor Splunk infrastructure.
• Onboard and troubleshoot data from servers, applications, network devices, security tools, cloud platforms, and databases.
• Manage indexes, retention, storage, licensing, users, roles, authentication, and access controls.
• Develop and maintain searches, dashboards, reports, alerts, and security monitoring use cases.
• Optimize search performance, system health, capacity, availability, and licensing.
• Integrate Splunk with security and enterprise platforms through APIs and automation.
• Support SOC investigations, incident response, compliance, and audits.

Required Qualifications

• 5+ years of experience with Splunk Enterprise
• Knowledge of Splunk architecture, distributed deployments, and configuration files.
• Experience administering Indexers, Search Heads, Forwarders, and Deployment Servers.
• Experience onboarding and troubleshooting diverse data sources.
• Strong analytical, troubleshooting, communication, and documentation skills.

Preferred Qualifications

• Splunk Enterprise Certified Admin or Architect certification.
• Experience with Splunk Enterprise Security, Splunk SOAR, or Splunk Cloud.
• Experience with SIEM/SOC operations, cloud platforms, Kubernetes, or cybersecurity integrations.
• Knowledge of ITIL and enterprise change-management practices.