Splunk Administrator

As a Splunk Administrator at our organization, you will play a crucial role in managing and administering Splunk environments. With a minimum of 4 years of experience, you will be responsible for configuring, deploying, monitoring, and maintaining Splunk infrastructure to ensure high availability and optimal performance. Your expertise will be key in providing support for incident resolution, performance tuning, and ensuring the stability and scalability of Splunk environments. Your key responsibilities will include administering and managing Splunk Enterprise environments, implementing and maintaining Splunk forwarders, data inputs, and indexes, as well as creating, configuring, and troubleshooting Splunk data pipelines and inputs. You will develop and optimize search queries, dashboards, and reports to support various analytics use cases and collaborate with security and network teams for log collection and integration from various data sources. Additionally, you will be involved in troubleshooting and resolving issues related to Splunk data ingestion, indexer clusters, search head clusters, and forwarders, performing Splunk upgrades, patching, and system health checks, and monitoring system logs to identify performance issues and security threats. Your role will also entail creating and managing Splunk alerts, actions, and automated tasks, optimizing search performance, and providing training and support to end-users on the effective use of Splunk dashboards, reports, and queries. To be successful in this role, you should have a minimum of 4 years of hands-on experience as a Splunk Administrator, strong knowledge of Splunk architecture and deployment strategies, experience with Splunk SPL, Linux/Unix administration, and scripting, as well as familiarity with system monitoring tools and performance tuning techniques. Your ability to troubleshoot complex issues, work in a fast-paced environment, and communicate effectively will be crucial. Additionally, certifications such as Splunk Certified Administrator and experience with Splunk Enterprise Security or IT Service Intelligence will be advantageous. If you are passionate about Splunk administration and have the required experience and skills, we encourage you to share your resume with us via email at Rashmi@ssquad.com. Join our dynamic team and make a significant impact with your Splunk expertise.,