Splunk Administrator

Splunk Administrator

Job Summary:

We are seeking a skilled Splunk Administrator to manage and maintain our Splunk infrastructure. The ideal candidate will have hands-on experience in deploying, configuring, and optimizing Splunk environments to support data analysis, monitoring, and security operations. This role requires strong technical expertise, attention to detail, and the ability to troubleshoot and resolve issues efficiently.

Key Responsibilities:

1. Splunk Infrastructure Management:
   1. Deploy, configure, and maintain Splunk components (e.g., Search Heads, Indexers, Forwarders, Deployment Server).
   1. Monitor and optimize Splunk infrastructure for performance, scalability, and high availability.
   1. Perform regular upgrades, patches, and troubleshooting to ensure system stability.
2. Data Onboarding and Configuration:
   1. Onboard data from various sources (e.g., logs, metrics, events) into Splunk.
   1. Develop and maintain data parsing, normalization, and enrichment using Splunk configurations.
   1. Create and manage data inputs, indexes, and field extractions.
3. User Management and Support:
   1. Manage user roles, permissions, and access controls within Splunk.
   1. Provide technical support to end-users, resolving issues related to Splunk functionality.
   1. Conduct training sessions and create user guides to improve system adoption and efficiency.
4. Dashboards and Reporting:
   1. Design and develop custom Splunk dashboards, reports, and alerts to meet business requirements.
   1. Use Splunk’s Search Processing Language (SPL) to create complex queries and visualizations.
   1. Provide actionable insights to stakeholders through data analysis and visualization.
5. Security and Compliance:
   1. Implement and enforce security policies to protect Splunk environments and data.
   1. Monitor and analyze security events, logs, and alerts to identify potential threats.
   1. Ensure compliance with industry standards and regulations (e.g., GDPR, HIPAA, PCI-DSS).
6. Integration and Automation:
   1. Configure and manage integrations between Splunk and other systems (e.g., SIEM, ITSM, cloud platforms).
   1. Develop and maintain automated workflows and scripts to streamline data collection and analysis.
   1. Troubleshoot and resolve integration issues.
7. Documentation and Best Practices:
   1. Maintain detailed documentation of Splunk configurations, processes, and procedures.
   1. Develop and update disaster recovery and business continuity plans for Splunk environments.
   1. Stay updated on Splunk best practices, new features, and industry trends.

Qualifications:

• Education: Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Experience:
  • 3+ years of experience as a Splunk Administrator or in a similar role.
  • Hands-on experience with Splunk Enterprise and Splunk Cloud.
  • Familiarity with Splunk Enterprise Security (ES) and IT Service Intelligence (ITSI) is a plus.
  • Experience with data onboarding, parsing, and normalization.
• Technical Skills:
  • Proficiency in Splunk Search Processing Language (SPL).
  • Knowledge of Splunk architecture and components (e.g., Indexers, Search Heads, Forwarders).
  • Familiarity with scripting languages (e.g., Python, Bash) for automation.
  • Understanding of security and compliance requirements.
• Certifications (Preferred):
  • Splunk Certified Administrator.
  • Splunk Certified Power User.
  • Splunk Certified Enterprise Security Admin.
• Soft Skills:
  • Strong analytical and problem-solving skills.
  • Excellent communication and interpersonal abilities.
  • Ability to work independently and as part of a team.

Work Environment:

• Location: Dubai, United Arab Emirates
• Travel: Need to relocate to Dubai

Why Join Us?

• Opportunity to work with cutting-edge Splunk technologies.
• Collaborative and innovative work environment.
• Competitive salary and benefits package.
• Professional growth and development opportunities.

If you are passionate about Splunk and have a proven track record in system administration, we encourage you to apply and become a key player in our team!