Splunk Administrator

We are looking for an experienced Splunk Administrator to support and strengthen a critical logging and monitoring environment in Bensalem, Pennsylvania. This position is responsible for keeping the platform reliable, secure, and scalable while enabling visibility across infrastructure, applications, and security operations. The ideal candidate brings strong hands-on expertise in Splunk administration, data onboarding, and performance tuning, along with the ability to work effectively across technical teams.

Responsibilities:

• Oversee the day-to-day administration of the Splunk platform, including core components such as search nodes, indexing systems, forwarders, deployment services, and clustered environments.
• Perform platform installation, configuration, version updates, patching, and ongoing health monitoring to maintain a stable and secure environment.
• Connect and validate log and event data from a wide range of sources, including servers, business applications, network equipment, security technologies, cloud services, and database systems.
• Configure and manage data retention settings, index structures, storage usage, licensing consumption, and role-based access to support governance and operational needs.
• Build and maintain useful searches, visualizations, scheduled reports, and alerting workflows that improve operational awareness and security monitoring.
• Troubleshoot ingestion issues, system errors, and search inefficiencies while improving overall platform responsiveness and reliability.
• Enhance Splunk integrations with enterprise and security tools through APIs, scripting, and automation where appropriate.
• Partner with security and IT teams to support investigations, incident handling, audit readiness, and compliance-related activities.
• At least 5 years of hands-on experience administering Splunk Enterprise in production environments.
• Strong understanding of Splunk architecture, including distributed deployments and core configuration management.
• Hands-on experience supporting indexers, search heads, forwarders, and deployment servers.
• Proven ability to onboard, normalize, and troubleshoot data from multiple technology sources.
• Solid analytical and problem-solving skills with the ability to document findings and communicate clearly with technical stakeholders.
• Experience working with Linux, networking concepts, and log management best practices.
• Familiarity with automation or scripting to streamline administration and operational support.
• Splunk certification or experience with Splunk Enterprise Security, Splunk Cloud, or related security monitoring solutions is preferred.