Splunk Administrator at Noblesoft Technologies Remote

Comunidade Metodista; United States; Remote; USD 95,000 - 135,000; Full time

Job summary

Noblesoft Technologies is seeking a Splunk Administrator for a remote role. You will manage Splunk infrastructure, optimize clusters, and ensure high availability.

Responsibilities include data ingestion design, parsing configurations, building dashboards, security compliance, automation with SPL, and documenting procedures with training support for IT teams.

Qualifications

• Experience managing Splunk infrastructure and cloud environments.
• Ability to design and implement data ingestion strategies for logs.
• Develop parsing configurations to normalize incoming data.
• Create and optimize searches and dashboards for stakeholders.
• Ensure security and regulatory compliance in log data.

Responsibilities

• Monitor and optimize Splunk clusters for performance and reliability.
• Troubleshoot and resolve Splunk infrastructure issues to maintain uptime.
• Design data ingestion pipelines from multiple log sources into Splunk.
• Develop and maintain parsing configurations to enrich data.
• Create searches, reports, and dashboards for various stakeholders.
• Implement security best practices and monitor alerts.
• Automate tasks using SPL and other scripting languages.
• Document configurations and provide training to IT staff.

Skills

Splunk infrastructure

Data ingestion design

Parsing configurations

Search queries & dashboards

Security & compliance

Automation & scripting

Documentation & training

Tools

Splunk

SPL

Job description

Splunk Administrator job at Noblesoft Technologies. Remote.

Job Title: Splunk Administrator

Location: Remote

JD Splunk

1. Splunk Infrastructure Management:

• Monitor and optimize the performance of Splunk clusters to ensure efficient data processing and search capabilities.
• Troubleshoot and resolve issues related to Splunk infrastructure, ensuring high availability and reliability.
• Experience in Splunk Cloud Infrastructure.

2. Data Ingestion and Parsing:

• Design and implement data ingestion strategies for various log sources into Splunk.
• Develop and maintain parsing configurations to normalize and enrich incoming data for effective analysis.
• Collaborate with application owners and IT teams to onboard new data sources into Splunk.

3. Search and Reporting:

• Create and optimize search queries and reports to extract valuable insights from the indexed data.
• Customize and implement Splunk dashboards for different stakeholders to visualize key performance indicators and security metrics.

4. Security and Compliance:

• Implement security best practices within Splunk to safeguard sensitive data.
• Collaborate with the security team to configure and monitor alerts for suspicious activities or security incidents.
• Ensure compliance with industry regulations and internal policies related to log management and data retention.

5. Automation and Scripting:

• Develop automation scripts using SPL (Search Processing Language) and other scripting languages to streamline administrative tasks.
• Continuously seek opportunities to improve efficiency through automation in Splunk processes.

6. Documentation and Training:

• Maintain thorough documentation of Splunk configurations, processes, and troubleshooting procedures.

Provide training and support to other IT team members on Splunk best practices and usage