Splunk Administrator

Pffcu; Bensalem Township (Bucks County); On-site; USD 120,000 - 150,000; Full time

Benefits offered by this job

Excellent medical, dental, vision bene

401K with automatic 6% contribution

Job summary

PFFCU Information Technology Professional role in Bensalem, PA seeks a Splunk-focused engineer to manage, secure, maintain and optimize the organization’s Splunk environment, supporting security monitoring, IT operations, data ingestion, dashboards, alerts, troubleshooting, and compliance.

The role administers Search Heads, Indexers, Forwarders, and deployment servers; onboards diverse data sources; develops searches and dashboards; and collaborates with SOC during investigations and audits.

Qualifications

• 5+ years of experience with Splunk Enterprise.
• Knowledge of Splunk architecture, distributed deployments, and configuration files.
• Experience administering Indexers, Search Heads, Forwarders, and Deployment Servers.
• Experience onboarding and troubleshooting diverse data sources.
• Strong analytical, troubleshooting, communication, and documentation skills.

Responsibilities

• Administer Splunk components: Search Heads, Indexers, Forwarders, Deployment Servers, and clustering.
• Install, configure, upgrade, patch, and monitor Splunk infrastructure.
• Onboard and troubleshoot data from servers, apps, devices, and cloud platforms.
• Manage indexes, retention, storage, licensing, users, roles, authentication, and access controls.
• Develop and maintain searches, dashboards, reports, alerts, and security monitoring use cases.
• Optimize search performance, system health, capacity, availability, and licensing.
• Integrate Splunk with security and enterprise platforms via APIs and automation.
• Support SOC investigations, incidents, compliance, and audits.

Skills

Splunk Enterprise

Splunk architecture

Data onboarding

Troubleshooting

Documentation

Analytical skills

Tools

Kubernetes

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Information Technology Professional Bensalem, PA, US

2 days ago Requisition ID: 2237

Competitive Base Salary - Experience Required

****EXCELLENT MEDICAL, DENTAL, VISION BENEFITS: 75% to 90% of premiums covered by PFFCU***** ****401K – PFFCU contributes automatic 6% regardless of employee contribution after 1 year*****

********Great benefits, paid time off, and more! Become a part of the team today!******

Role Overview

Manage, secure, maintain, and optimize the organization’s Splunk environment supporting security monitoring, IT operations, data ingestion, dashboards, alerts, troubleshooting, and compliance.

Key Responsibilities

• Administer Splunk Search Heads, Indexers, Forwarders, Deployment Servers, and clustered environments.
• Install, configure, upgrade, patch, and monitor Splunk infrastructure.
• Onboard and troubleshoot data from servers, applications, network devices, security tools, cloud platforms, and databases.
• Manage indexes, retention, storage, licensing, users, roles, authentication, and access controls.
• Develop and maintain searches, dashboards, reports, alerts, and security monitoring use cases.
• Optimize search performance, system health, capacity, availability, and licensing.
• Integrate Splunk with security and enterprise platforms through APIs and automation.
• Support SOC investigations, incident response, compliance, and audits.

Required Qualifications

• 5+ years of experience with Splunk Enterprise
• Knowledge of Splunk architecture, distributed deployments, and configuration files.
• Experience administering Indexers, Search Heads, Forwarders, and Deployment Servers.
• Experience onboarding and troubleshooting diverse data sources.
• Strong analytical, troubleshooting, communication, and documentation skills.

Preferred Qualifications

• Splunk Enterprise Certified Admin or Architect certification.
• Experience with Splunk Enterprise Security, Splunk SOAR, or Splunk Cloud.
• Experience with SIEM/SOC operations, cloud platforms, Kubernetes, or cybersecurity integrations.
• Knowledge of ITIL and enterprise change-management practices.