Splunk System Administrator

BlueSnap, Inc; New York (NY); Remote; USD 90,000 - 130,000; Part time

Job summary

TripleTen is seeking a Splunk System Administrator to manage the performance of our Splunk Enterprise environment. This role is pivotal in ensuring high availability and reliability, while collaborating with a diverse team to develop and deploy Splunk features for our cybersecurity bootcamp. The position offers remote, part-time work with opportunities for networking in a global team.

Benefits

Cross-cultural work experience

Comfortable digital office

Diverse team

Qualifications

• 3+ years administering Splunk Enterprise.
• Strong SPL, SAML/SSO, RBAC, and Linux CLI troubleshooting skills.
• Experience with self-hosted Splunk instances.

Responsibilities

• Maintain and monitor Splunk platform (upgrades, patches, health checks).
• Troubleshooting & Support: investigate incidents, analyze logs, run diagnostic queries.
• Manage security and access (SAML/SSO, RBAC).

Skills

SPL

SAML/SSO

RBAC

Linux CLI

Troubleshooting

Problem-solving

Teamwork

Education

Splunk Enterprise Certified Admin

Core Certified Advanced Power User

Job description

TripleTen is a service that empowers individuals, regardless of their prior experience, to embark on the exciting and challenging journey of mastering tech professions. Our bootcamps focus on training students in software engineering, data science, business intelligence analytics, and QA engineering in a feasible and accessible way, ultimately leading them to thrive in a new career.

Our mission is to ensure that every student has the opportunity to successfully master a new profession, find their purpose, and become a valuable member of the tech industry. TripleTen is a remote-first organization, mirroring our students who complete our bootcamps in a remote environment.

As a Splunk System Administrator, you will own the health and performance of our Splunk Enterprise environment, ensuring high availability, reliability, and observability. You will be responsible for managing the performance of the Splunk server used in our cybersecurity bootcamp—a deployment with unique requirements and constraints that occasionally involve creative solutions.

You will collaborate with stakeholders (such as expert tutors, curriculum developers, and platform developers) to design and deploy new Splunk features, content, and integrations—such as dashboards, alerts, reports, and custom apps—while executing system administration tasks including performance tuning, index management, and authentication integration.

What you will do

• Maintain and monitor Splunk platform (upgrades, patches, health checks).
• Tune performance (index/search optimizations).
• Collaborate with stakeholders to develop and deploy Splunk features and content.
• Troubleshooting & Support: investigate incidents, analyze logs, run diagnostic queries, and resolve issues.
• Manage security and access (SAML/SSO, RBAC, user management).
• Onboard and configure data (indexes, timestamp correction, re-indexing).

Requirements

• 3+ years administering Splunk Enterprise (index & search head clusters, large datasets).
• Splunk Enterprise Certified Admin & Core Certified Advanced Power User.
• Strong SPL, SAML/SSO, RBAC, and Linux CLI troubleshooting skills.
• Experience deploying, managing, and administering self-hosted Splunk instances.
• Experience troubleshooting observability and monitoring pipelines, dashboards, and alerts.
• Strong organizational, problem-solving, and teamwork abilities.

What we can offer you

• Remote, part-time, shift-based work;
• Cross-cultural work experience and lots of opportunities for networking with teammates who love what they do;
• A comfortable digital office. We use modern digital tools — Miro, Notion, Google Meet, etc.— to make the process of working together seamless;
• Diverse and tight-knit team which is spread out across US, Serbia, Latin America and more.

*At this time, we are unable to offer H-1B, L-1A/B sponsorship opportunities.

**This job description is not designed to contain a comprehensive listing of activities, duties, or responsibilities that are required. Nothing in this job description restricts management's right to assign or reassign duties and responsibilities at any time.

***TripleTen is an equal employment opportunity/affirmative action employer and considers qualified applicants for employment without regard to race, color, religion, sex, national origin, age, religion, disability, marital status, sexual orientation, gender identity/expression, protected military/veteran status, or any other legally protected factor.