Splunk Administration Engineer

Title: Splunk Administration Engineer
Location: Bengaluru
Exp: Minimum 5 year(s) of experience

Job Description:
Roles & Responsibilities:
- Administer and maintain Splunk Enterprise and Splunk Observability Cloud environments.
- Develop and optimize dashboards, alerts, and reports for operational insights.
- Configure and manage data ingestion from multiple sources (logs, metrics, traces).
- Implement best practices for indexing, clustering, and data retention policies.
- Collaborate with application and infrastructure teams to onboard new data sources.
- Ensure compliance with security standards and manage user roles and access controls.
- Troubleshoot performance issues and optimize search queries for efficiency.
- Support upgrades, patches, and capacity planning for Splunk environments.
- Automate routine tasks using scripts and Splunk REST APIs.
Professional & Technical Skills:
Must Have Skills:
- Strong experience in Splunk Enterprise Administration (installation, configuration, scaling).
- Expertise in Splunk Observability Suite (Infrastructure Monitoring, APM, RUM).
- Proficiency in creating dashboards, alerts, and advanced SPL queries.
- Knowledge of data onboarding, parsing, and field extractions.
- Familiarity with clustering, indexer replication, and high-availability setups.
Good To Have Skills:
- Experience with scripting (Python, Bash) for automation.
- Knowledge of cloud platforms (AWS, Azure, GCP) and observability integrations.
- Understanding of ITIL processes and incident management workflows.
- Exposure to container monitoring (Kubernetes, Docker) and Open Telemetry.