Splunk Administrator and Developer

Custom Software Engineer

Project Role : Custom Software Engineer
Project Role Description : Develop custom software solutions to design, code, and enhance components across systems or applications. Use modern frameworks and agile practices to deliver scalable, high-performing solutions tailored to specific business needs.
Must have skills : Splunk
Good to have skills : NA
Minimum 3 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary: We are seeking a motivated Splunk Administrator & Developer with 2–5 years of experience to manage, develop, and optimize Splunk environments. The role involves administration of Splunk infrastructure, dashboard and report development, alerting configuration, and troubleshooting log ingestion issues. Roles & Responsibilities: Splunk Administration -Install, configure, and upgrade Splunk Enterprise/Cloud components (Search Head, Indexer, Forwarders). -Manage Splunk user accounts, roles, and access controls. -Perform routine health checks of Splunk servers and components. -Monitor system performance, indexing, and search efficiency. -Ensure high availability and scalability of Splunk infrastructure. -Splunk Development -Design and develop dashboards, reports, and visualizations in Splunk. -Create and manage saved searches, scheduled reports, and alerts. -Develop custom SPL queries for log analysis and troubleshooting. -Integrate Splunk with external systems (ServiceNow, monitoring tools, etc.). Monitoring & Alerting -Configure alerts for log ingestion failures, indexing errors, and system health. -Implement proactive monitoring for application and infrastructure logs. -Collaborate with teams to define KPIs and monitoring requirements. Troubleshooting & Support -Investigate and resolve issues with log ingestion (Forwarders, Logstash, etc.). -Analyze Splunk logs and configuration files to identify root causes. -Provide support for dashboard performance and query optimization. Collaboration & Documentation -Work closely with DevOps, Infrastructure, and Application teams. -Document Splunk configurations, dashboards, and best practices. -Conduct knowledge transfer (KT) sessions for team members. Professional & Technical Skills: 2–5 years of hands-on experience in Splunk administration and development. Strong knowledge of SPL (Search Processing Language). Experience in creating dashboards, alerts, and reports. Familiarity with log ingestion pipelines (Forwarders, Logstash, syslog). Understanding of Linux/Unix environments and system monitoring. Good troubleshooting and problem-solving skills. Strong communication and documentation abilities. Additional Information: Experience with ServiceNow integration or other ITSM tools. Knowledge of cloud platforms (AWS, Azure, GCP) and Splunk Cloud. Exposure to security monitoring (SIEM use cases). Familiarity with DevOps practices and CI/CD pipelines