Splunk Administrator(SRE)

Job Description Splunk Administrator (SRE)

Role Summary

We are seeking a Splunk Administrator to join our Site Reliability Engineering (SRE) team. The role combines core Splunk platform administration with SRE responsibilities—ensuring the reliability, availability, and performance of the Splunk observability platform. You will maintain and optimise the environment, support onboarding of data, and respond to incidents to keep business-critical monitoring services running smoothly.

Key Responsibilities

Splunk Administration

• Install, configure, and maintain Splunk components (indexers, search heads, forwarders, deployment servers).
• Onboard and manage data inputs, source types, indexes, and field extractions.
• Create and maintain dashboards, alerts, reports, and knowledge objects.
• Manage user roles, permissions, and access controls.
• Perform routine upgrades, patching, and health checks across the environment.

SRE Duties

• Monitor platform health, capacity, and performance; proactively address bottlenecks.
• Respond to incidents (INCs), perform troubleshooting, and drive timely resolution.
• Participate in on-call rotation and support major incident management.
• Contribute to root cause analysis (RCA) and implement preventive measures.
• Define and track SLOs/SLIs for platform reliability and availability.
• Automate routine operational tasks to reduce manual effort (scripting/config management).
• Support capacity planning and forecasting for data ingestion growth.

Collaboration & Continuous Improvement

• Work with development, infrastructure, and data teams to onboard new services.
• Document runbooks, standard operating procedures, and known error solutions.
• Identify and implement improvements to enhance stability and efficiency.

Required Skills & Experience

• Working knowledge of Splunk administration (indexes, inputs, search, dashboards, alerts).
• Understanding of SPL (Search Processing Language) for queries and troubleshooting.
• Familiarity with Linux/Unix systems and command-line operations.
• Basic scripting skills (Bash, Python, or PowerShell) for automation.
• Understanding of networking, log sources, and data pipelines.
• Awareness of ITIL processes (incident, problem, and change management).
• Strong troubleshooting and problem-solving abilities.
• Good communication and documentation skills.

Desirable / Nice to Have

• Splunk Certified Admin (or working towards certification).
• Experience with monitoring/observability tools (Prometheus, Grafana, ITSI).
• Exposure to CI/CD pipelines and infrastructure-as-code (Ansible, Terraform).
• Cloud platform experience (AWS, Azure, or GCP).
• Understanding of Kafka or other data-streaming technologies.

Key Attributes

• Reliability-focused mindset with strong attention to detail.
• Proactive, self-motivated, and able to work under pressure.
• Team player with a continuous-improvement attitude.
• Willingness to participate in on-call and out-of-hours support when required.