Splunk administrator
Job Description
\n
\n
Splunk Architect/Senior Splunk Administrator
\n
Location: London (Hybrid)
\n
Contract: 6 months Initially
\n
IR35: Inside IR35
\n
Overview
\n
We are looking for an experienced Splunk Architect/Senior Splunk Administrator to support and enhance a large-scale Splunk environment. The role requires a strong mix of architectural knowledge and hands-on administration experience across Splunk Enterprise 9.x+ in clustered environments.
\n
Key Skills & Experience
\n
Splunk Enterprise Administration
\n
- \n
- Splunk environment design and architecture.
- Administration of Indexer and Search Head Clusters.
- Splunk upgrades and platform maintenance.
- Forwarder installation, configuration and troubleshooting.
- Data onboarding, parsing and data quality improvements.
- End-to-end SSL implementation across Splunk components.
- PCRE (Perl Compatible Regular Expressions).
- Data models, data model accelerations and summarised searches.
- Development of knowledge objects, dashboards and alerts.
- Platform health checks, optimisation and troubleshooting.
- Python Scripting (desirable).
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n
\n\n
Splunk Enterprise Security (ES)
\n
- \n
- ES data models and CIM compliance.
- Correlation searches and notable event management.
- ES content development and administration.
\n
\n
\n\n
Technical Environment
\n
- \n
- Experience working with Splunk environments managed through CI/CD pipelines.
- Strong Unix/Linux administration skills.
- Windows/PowerShell experience.
- Experience supporting hybrid cloud and on-premise environments.
\n
\n
\n
\n\n
Personal Attributes
\n
- \n
- Strong analytical and problem-solving skills.
- Excellent communication and stakeholder management.
- Collaborative team player with strong coordination skills.
\n
\n
\n\n
Desirable Experience
\n
- \n
- Splunk Cloud (SaaS).
- Splunk SOAR.
- Splunk Enterprise Security administration.
- Splunk migration, consolidation or transformation projects.
\n
\n
\n
\n\n
This is an excellent opportunity for a hands-on Splunk specialist who can operate at both technical and architectural levels within a complex enterprise environment.
\n
Guidant, Carbon60, Lorien & SRG - The Impellam Group Portfolio are acting as an Employment Business in relation to this vacancy.