Splunk SME & Splunk Admin

Intellectt Inc; United States; Remote; USD 120,000 - 160,000; Full time

Job summary

Intellectt Inc is seeking a Senior Splunk SME & Splunk Administrator to lead day-to-day administration of Splunk and Cribl environments in a fully remote US-based role.

Responsibilities include maintaining dashboards, onboarding data sources via Cribl, troubleshooting end-to-end logging, and ensuring compliance in a regulated setting. The role supports on-call rotations and cross-functional collaboration, with CST-aligned hours.

Qualifications

• Strong hands-on experience with Splunk administration including search, indexing, forwarders, knowledge objects, dashboards, alerts, and role based access control.
• Working knowledge of Cribl Stream including routing, enrichment, filtering, and pipeline management.
• Experience administering Linux systems including log collection, service management, and system troubleshooting.
• Strong problem solving and ability to troubleshoot complex issues across the logging platform.
• Effective communication skills and ability to work with technical and non-technical stakeholders.
• Ability to work in a Central Time Zone aligned schedule in a fully remote capacity.

Responsibilities

• Provide day to day administration and monitoring of Splunk and Cribl environments including system health, performance tuning, and capacity planning.
• Maintain and support existing Splunk dashboards, alerts, searches, and data inputs while resolving issues as they arise.
• Manage onboarding of new data sources through Cribl pipelines ensuring data quality and correct routing prior to indexing in Splunk.
• Troubleshoot platform issues across the full logging lifecycle from data source through Cribl routing into Splunk indexing and search layers.
• Maintain logging and monitoring configurations aligned to applicable compliance requirements within a regulated environment.
• Participate in on call rotation and support scheduled after hours maintenance windows.
• Collaborate with team members and leadership to ensure operational continuity during staffing transition.
• Support development toward a self service dashboard model for internal stakeholders.

Skills

Splunk administration

Cribl routing

Problem solving

Communication

Central Time Zone

Tools

Cribl Stream

Linux systems

Job description

Hiring: Senior Splunk SME & Splunk Administrator

Experience: 14+

Responsibilities:

• Provide day to day administration and monitoring of Splunk and Cribl environments including system health, performance tuning, and capacity planning
• Maintain and support existing Splunk dashboards, alerts, searches, and data inputs while resolving issues as they arise
• Manage onboarding of new data sources through Cribl pipelines ensuring data quality and correct routing prior to indexing in Splunk
• Troubleshoot platform issues across the full logging lifecycle from data source through Cribl routing into Splunk indexing and search layers
• Maintain logging and monitoring configurations aligned to applicable compliance requirements within a regulated environment
• Participate in on call rotation and support scheduled after hours maintenance windows
• Collaborate with team members and leadership to ensure operational continuity during staffing transition
• Support development toward a self service dashboard model for internal stakeholders

Qualifications:

• Strong hands on experience with Splunk administration including search, indexing, forwarders, knowledge objects, dashboards, alerts, and role based access control
• Working knowledge of Cribl Stream including routing, enrichment, filtering, and pipeline management
• Experience administering Linux systems including log collection, service management, and system troubleshooting
• Strong problem solving skills with ability to troubleshoot complex issues across the logging platform
• Effective communication skills with the ability to work across technical and non-technical stakeholders
• Ability to work in a Central Time Zone aligned schedule in a fully remote capacity
• Availability for occasional after hours support and on call rotation