Splunk Admin

We are looking for an experienced Splunk Administrator with strong Linux administration skills to manage, maintain, and optimize the Splunk platform. The ideal candidate will be responsible for Splunk infrastructure administration, log management, performance tuning, troubleshooting, and ensuring high availability across enterprise environments.
Key Responsibilities

• Install, configure, administer, and maintain Splunk Enterprise environments.
• Deploy and manage Universal Forwarders and Heavy Forwarders across Linux servers.
• Configure and manage Indexers, Search Heads, Deployment Servers, and Cluster Manager.
• Monitor Splunk health, indexing performance, and storage utilization.
• Perform Splunk upgrades, migrations, patching, backup, and disaster recovery activities.
• Create and maintain dashboards, reports, alerts, and scheduled searches.
• Troubleshoot data ingestion, indexing, and search performance issues.
• Configure data inputs, parsing, field extractions, lookups, and knowledge objects.
• Implement role-based access control (RBAC), LDAP/Active Directory integration, and authentication.
• Collaborate with infrastructure, application, and security teams to onboard new data sources.
• Automate routine administration tasks using Shell or Python scripting.
• Perform capacity planning and optimize Splunk infrastructure for scalability.

Maintain documentation for Splunk architecture, configurations, and operational procedures