Splunk admin

Role : Splunk Admin

Experience : 5 to 10 years

Location : Chennai, Bangalore,hyderbad

Keywords : Splunk Administrator, Azure DevOps, GitHub, VSCODE

Desired Competencies (Technical/Behavioral Competency)

1. Expertise in Splunk, including native Splunk features and data ingestion workflows.
2. Experience with CI/CD toolchains such as Azure DevOps and GitHub.
3. Proficiency in scripting and general software development/testing.
4. Ability to instrument basic data ingestion into Splunk using standard logging, build visualizations, and configure event notifications.
5. Ability to instrument advanced data ingestion using Add‑Ons, HEC, containers, and cloud platforms.
6. Collaborate with customers to understand requirements and ensure delivery of appropriate ingestion solutions.
7. Work with Splunk and cloud teams to enable custom ingestion support and onboard data from cloud and containerized environments.
8. Diagnose ingestion issues involving Add‑Ons, HEC, containers, and cloud sources.
9. Working knowledge of Splunk Cloud and Splunk premium applications.
10. Familiarity with cloud platforms and container technologies such as Docker, OpenShift, and Kubernetes.
11. Understanding of web server logs, syslog, and operating system logs.
12. Experience with Infrastructure as a Service (IaaS) and development using Python.
13. Ability to maintain work item updates and keep backlog items current.
14. Demonstrated capability to support ingestion workflows with technical proficiency, operational reliability, and adherence to organizational standards.
15. Ability to support data ingestion pipelines, including Splunk/Cribl ingestion, pipeline execution, log stream management, and observability tooling.
16. Proficiency in SPL, regular expressions, and scripting languages such as Python, Bash, or PowerShell for automation and troubleshooting.
17. General IT knowledge in networking, operating systems, cloud environments, and security principles to support ingestion workflows effectively.
18. Understanding of infrastructure/configuration‑as‑code tools such as Terraform.
19. Splunk certifications: 100% Power User and at least two Cloud Admin certifications.
20. Experience with Cribl ingestion, pipeline execution, monitoring, and support.
21. Familiarity with integration between ingestion pipelines and downstream observability platforms (dashboards, alerting systems, data lakes).
22. Ability to provide operational support, including incident resolution, troubleshooting, and 24/7 on‑call availability for critical ingestion pipeline outages.