Splunk Administrator

Role & Responsibilities

• Execute change requests for Splunk systems following TechOps runbooks and compliance standards.
• Utilize ServiceNow workflows and IA tickets for tracking and executing changes.
• Review, validate, and implement proposed Splunk configuration changes.
• Develop, maintain, and update Splunk runbooks, including rollback and validation steps.
• Follow second-person review protocols and maintain versioned documentation per guidelines.
• Provide ad hoc reporting and support customer escalations or incident investigations.
• Track KPIs and SLAs, including successful execution rates of approved changes.
• Execute production-grade changes via ServiceNow while adhering to compliance and control gates.