Company: SHI Locuz Company,India
Job Title: Splunk Administrator
Skills :: Splunk Enterprise, Splunk Administration, Splunk Enterprise Security (ES), Distributed Architecture, Search Head, Indexer, Forwarder, Cluster Manager, License Manager, SPL, Linux/Unix, Log Onboarding, Log Ingestion, Syslog, Parsing, Field Extraction, SIEM, SOC, TCP/IP, DNS, SSL/TLS, Python/Bash/PowerShell

Experience: 2+ Years
Level: L2
Joining: Immediate to 15 Days
Mode of Interview :: Virtual

Please find below given JD.

Position : Splunk Administrator
Level: L2
Location : Mumbai

Key Responsibilities
Administer and support Splunk Enterprise infrastructure in production environments.
Manage and monitor Search Heads, Indexers, Forwarders, Cluster Managers, and License Managers.
Troubleshoot data ingestion, indexing, search performance, and forwarder-related issues.
Perform root cause analysis (RCA) and resolve incidents within SLA timelines.
Onboard current log sources and configure data collection using Splunk Forwarders and Syslog.
Manage Splunk configurations including inputs.conf, props.conf, transforms.conf, and outputs.conf.
Monitor platform health, storage utilisation, indexing performance, and licence consumption.
Configure and maintain dashboards, alerts, reports,



and scheduled searches.
Implement and manage RBAC, LDAP/AD integration, and Splunk security best practices.
Support Splunk upgrades, patching, migrations, and disaster recovery activities.
Automate operational tasks using Shell scripting, Python, or PowerShell.
Work closely with SOC, Infrastructure, Application, and Security teams for platform support.
Maintain operational documentation, SOPs, and troubleshooting runbooks.
Ensure high availability, performance optimisation, and compliance with organisational standards.
Required Skills
Hands-on experience with Splunk Enterprise and Enterprise Security Administration.
Strong understanding of Splunk distributed architecture and clustering.
Experience with Linux/Unix administration.
Knowledge of SPL (Search Processing Language).
Experience in log onboarding, parsing, and field extractions.
Understanding of SIEM, SOC operations, and security monitoring.
Basic networking knowledge (TCP/IP, DNS, Syslog, SSL/TLS, APIs).
Scripting experience in Python, Bash, or PowerShell.
Experience
2-4 years of hands-on Splunk Administration experience.
Splunk Enterprise Certified Admin certification preferred.

📌 Splunk Administration (Mumbai)
🏢 SHI Solutions India
📍 Mumbai