MUMBAI · FULLTIME
Splunk Administrator
SHI
Mumbai · onsite · Posted 34d ago
About a minute. You'll make an account on the way through.
agent · working
- Read this posting0.5s
- Found the form on Naukri · 5 questions to answer1.8s
- Decided the answers for all of them2.9s
- Tailor your résumé to this role
- Waiting for you
Section · 01
About this role
Splunk Administrator L2
Location: Mumbai
Experience: 2 - 4 Years
Role Overview
We are looking for a Splunk Administrator L2 with hands-on experience in managing and supporting Splunk Enterprise environments. The role involves platform administration, troubleshooting, log onboarding, performance monitoring, security configuration, and production support.
Key Responsibilities
- Administer and support Splunk Enterprise in production environments.
- Manage Search Heads, Indexers, Forwarders, Cluster Managers, and License Managers.
- Troubleshoot data ingestion, indexing, search performance, and forwarder-related issues.
- Perform RCA and resolve incidents within defined SLA timelines.
- Onboard new log sources using Splunk Forwarders and Syslog.
- Configure and troubleshoot inputs.conf, outputs.conf, props.conf, transforms.conf, and indexes.conf.
- Manage dashboards, alerts, reports, and scheduled searches.
- Monitor Splunk health, storage utilization, indexing performance, and license consumption.
- Implement RBAC and LDAP/AD integration and follow Splunk security best practices.
- Support upgrades, patching, migrations, and disaster recovery activities.
- Automate operational tasks using Python, Bash/Shell, or PowerShell.
- Work with SOC, Infrastructure, Application, Network, and Security teams.
- Maintain SOPs, troubleshooting guides, and operational documentation.
Required Skills
- 24 years of hands-on Splunk Administration experience.
- Strong knowledge of Splunk Enterprise and Splunk Enterprise Security (ES).
- Good understanding of Splunk distributed architecture and clustering.
- Strong knowledge of SPL and experience with log onboarding, parsing, and field extraction.
- Experience with Linux/Unix administration.
- Understanding of SIEM, SOC operations, and security monitoring.
- Basic knowledge of TCP/IP, DNS, Syslog, SSL/TLS, and REST APIs.
- Scripting experience in Python, Bash/Shell, or PowerShell.
- Strong troubleshooting, RCA, and production support skills.
Preferred
- Splunk Enterprise Certified Admin certification.
- Experience with Indexer Clustering, Search Head Clustering, Deployment Server, and Cluster Manager.
- Experience supporting Splunk upgrades, migrations, and DR activities.
Please share your cv to [email removed]
Sourced from naukri
Section · 02
Skills
Section · Company
About SHI
SHI
Hyderabad
IN
About
SHI | Locuz; part of the SHI group of companies, is a Security led digital transformation company with its Innovation & Engineering headquarters in Hyderabad, India. We are a Security led digital transformation partner with our Innovation & Engineering hubs in Hyderabad, India. Our lineage has been building some of the largest and most complex systems across the globe which were not just technology projects but touched people. Be it setting up complete infrastructure for the Moon Mission or building a Tsunami warning system or be it one of the largest Axle Manufacturer and their 800+ workloads moved to the cloud, we have dealt with business problems of different scales. Cyber Security has been a big part of solving these problems and hence it became part of our DNA and is fundamental to all our solutions.
We believe that a modern organization needs to leverage the new toolbox which constitutes of Automation, AI, ML, Analytics, Data, Cloud and DevOps. Security is fundamental to all of those tools and is the underpinning of every solution. We have continuously focused on building assets which reduce the time to market and enable Innovation.
Our platforms like ClouTor and GANANA are pushing the envelope when it comes to CloudOps, Data & Virtualization and High-Performance Computing.
Locuz is focused on
1.CloudOps our AI/ML power platform for 360 degree Cloud Operations, from Visibility to Economics.
2.SecOps Highly mature processes, tools and standards with Zero Trust as the foundation, our customers mean-time-to-detection is reduced to half, delivering SaaS or on-prem MDR capabilities. (SIEM/SOAR)
3.HPCOps As established leaders in the industry for the past 20 years, we offer comprehensive solutions of High Performance Computing, high performance storage and application parallelization.
4.AIOps A business-centric approach to Managed Services, enabling our customers to harness the power of Intelligent Automation and Processes disrupting MTTR averages, leading to upwards of 40% savings.
5.Insight as a service A business centric data service, which targets to deliver insights to business teams from their data.
Locuz is in the forefront in delivering exceptional value to its customers by continuously innovating, automating and modernizing their environments.
About SHI: SHI International Corp. is a global leader in technology solutions, serving a diverse set of customers with software, hardware, and services that tackle their IT challenges. Based in Somerset, New Jersey, SHI provides tailored IT solutions to corporate, enterprise, public sector, and education clients. With a workforce exceeding 6,000 employees worldwide, SHI is dedicated to fostering long-term success for its customers.
Industries
Employee ratings
16 reviews
Culture
2.9
Career growth
2.9
Work-life
3.4
Find them on