Splunk Administrator

About Sopra Steria
Sopra Steria, a major Tech player in Europe with 50,000 employees in nearly 30 countries, is recognised for its consulting, digital services and solutions. It helps its clients drive their digital transformation and obtain tangible and sustainable benefits. The Group provides end-to-end solutions to make large companies and organisations more competitive by combining in-depth knowledge of a wide range of business sectors and innovative technologies with a collaborative approach. Sopra Steria places people at the heart of everything it does and is committed to putting digital to work for its clients in order to build a positive future for all. In 2024, the Group generated revenues of €5.8 billion. The world is how we shape it.

Job Description and key skills:

• Monitor Splunk infrastructure, logs & dashboards for anomalies.
• Respond to alerts & incidents as part of business support.
• Perform initial triage, escalate to L3 when required.
• Work on incident resolution within defined SLA’s.
• Document the RCA for major incidents.
• Ensure high availability & reliability of Splunk environments (indexers, SHs, forwarders, etc.).
• Perform routine health checks & system audits.
• Handle Splunk configuration changes (inputs.conf, outputs.conf, props.conf, etc.).
• Manage users' access & roles.
• Identifying & resolving performance bottlenecks in indexing & searching.
• Monitor ingestion rates, indexing latency, data missing & storage usage.
• Work on daily deployments to create, update, and delete the Splunk apps, add-ons & configuration in a controlled manner.
• Maintain & validate data onboarding process with BSA, BAs, etc.
• Using scripts (bash, Python, etc.) to automate routine tasks.
• Work with CI/CD pipelines for Splunk deployments.
• Integrate Splunk with tools like ServiceNow, AWS, git, Jenkins, etc.
• Strong hands-on with Splunk core (Indexer, SH, Forwarder)
• Strong knowledge of Linux, networking & cloud platforms (AWS, GCP)
• Familiarity with ITIL process, especially incident, problem & change management

Tools: ServiceNow, Git, Jenkins, AWS, GCP

Certifications:-

• Splunk Core Certified User / Splunk Core Certified Power User
• Splunk Enterprise Certified Admin
• Splunk Cloud Certified Admin

Total Experience Expected: 06-08 years

Qualification

B.E. /B Tech in IT or Computer Engineering.

European Shift (if required).

At our organization, we are committed to fighting against all forms of discrimination. We foster a work environment that is inclusive and respectful of all differences.

All of our positions are open to people with disabilities.