Splunk Administrator

Company: SHI Locuz Company,India

Job Title: Splunk Administrator

Skills :: Splunk Enterprise, Splunk Administration, Splunk Enterprise Security (ES), Distributed Architecture, Search Head, Indexer, Forwarder, Cluster Manager, License Manager, SPL, Linux/Unix, Log Onboarding, Log Ingestion, Syslog, Parsing, Field Extraction, SIEM, SOC, TCP/IP, DNS, SSL/TLS, Python/Bash/PowerShell 

Experience: 2+ Years

Shift: Day Shifts  

Level: L2 

Joining: Immediate to 15 Days

Mode of Interview :: Virtual

Please find below given JD. 

Position : Splunk AdministratorLevel: L2Location : Mumbai Key Responsibilities

• Administer and support Splunk Enterprise infrastructure in production environments.
• Manage and monitor Search Heads, Indexers, Forwarders, Cluster Managers, and License Managers.
• Troubleshoot data ingestion, indexing, search performance, and forwarder-related issues.
• Perform root cause analysis (RCA) and resolve incidents within SLA timelines.
• Onboard new log sources and configure data collection using Splunk Forwarders and Syslog.
• Manage Splunk configurations including inputs.conf, props.conf, transforms.conf, and outputs.conf.
• Monitor platform health, storage utilisation, indexing performance, and licence consumption.
• Configure and maintain dashboards, alerts, reports, and scheduled searches.
• Implement and manage RBAC, LDAP/AD integration, and Splunk security best practices.
• Support Splunk upgrades, patching, migrations, and disaster recovery activities.
• Automate operational tasks using Shell scripting, Python, or PowerShell.
• Work closely with SOC, Infrastructure, Application, and Security teams for platform support.
• Maintain operational documentation, SOPs, and troubleshooting runbooks.
• Ensure high availability, performance optimisation, and compliance with organisational standards.

Required Skills

• Hands-on experience with Splunk Enterprise and Enterprise Security Administration.
• Strong understanding of Splunk distributed architecture and clustering.
• Experience with Linux/Unix administration.
• Knowledge of SPL (Search Processing Language).
• Experience in log onboarding, parsing, and field extractions.
• Understanding of SIEM, SOC operations, and security monitoring.
• Basic networking knowledge (TCP/IP, DNS, Syslog, SSL/TLS, APIs).
• Scripting experience in Python, Bash, or PowerShell.

Experience

• 2-4 years of hands-on Splunk Administration experience.
• Splunk Enterprise Certified Admin certification preferred.

Please Contact on below given details to know further Process .

Kindly fill the below details so that we can proceed further.

Please fill the following details

Your Overall experience ::

Relevant Experience ::

Your Current Company ::

Notice Period ::

Current Location ::

Preferred Location ::

Current CTC ::

Expected CTC ::

Highest Education Qualification ::

Are you willing to join within 15 Days ::

Please share your updated CV and above details to [email removed]