Splunk Admin

Role

Splunk Admin

Location

Remote - Columbus, OH

Duration

Fulltime

Splunk Power User Certification (Mandatory)

Job Description

• 8+ years of IT experience.
• 5+ years of hands-on Splunk administration and data ingestion experience.
• Proven experience with enterprise-scale observability, logging, and monitoring platforms.
• Hands-on experience with Splunk and Cribl ingestion workflows, pipeline execution, and troubleshooting

Technical Skills

• Splunk Enterprise and/or Splunk Cloud.
• Splunk data onboarding, parsing, routing, indexing, and forwarding.
• Cribl Stream administration, pipeline execution, monitoring, and support.

Strong proficiency in

o SPL

o RegEx

o Python, Bash, or PowerShell

• Knowledge of networking, Linux/Windows, cloud platforms (AWS/Azure/GCP), and security fundamentals.
• Experience supporting production environments and critical incidents.
• Willingness to participate in a 24x7 on-call rotation.

Key Responsibilities

• Lead all Splunk and Cribl data ingestion initiatives across teams.
• Serve as the primary contact for ingestion-related technical issues and stakeholder engagement.
• Mentor engineers on ingestion best practices, troubleshooting, and operational excellence.
• Support onboarding, execution, monitoring, and maintenance of ingestion pipelines.
• Drive logging, telemetry, and data governance standards.
• Develop automation for ingestion, monitoring, and operational activities.
• Support incident management, root cause analysis, and 24x7 on-call operations.
• Ensure seamless integration between ingestion platforms and observability tools, dashboards, alerting systems, and data lakes.

Leadership & Communication

• Experience leading technical discussions with clients and stakeholders.
• Proven mentoring and coaching experience for junior engineers and analysts.
• Strong verbal and written communication skills.