Splunk Administrator

Experience Required

36 years of experience in Splunk administration, engineering, or production support.

Hands-on knowledge of Splunk Search, dashboards, and ITSI (optional).

Experience working with ServiceNow workflows and IA tickets.

Background in compliance-driven or highly regulated environments.

Key Responsibilities

• Execute Splunk change requests as defined in Splunk TechOps runbooks and compliance guidelines.
• Use ServiceNow workflows for tracking, updating, and completing change activities.
• Review and validate proposed Splunk configurations prior to deployment.
• Develop, maintain, and enhance Splunk runbooks following documented standards.
• Follow second-person review and approval protocols for production changes.
• Provide ad hoc Splunk reporting, support customer escalations, and assist in incident investigations.
• Maintain engineering runbooks with accurate rollback and validation instructions.
• Track KPIs and SLAs including execution accuracy and successful change rates.
• Execute compliant, production-grade changes via ServiceNow.

Preferred Certifications

Splunk Core Certified Admin or Power User

ITIL Foundation

Puppet/Ansible certification (desirable)