Enterprise Splunk Platform Administrator

Role Summary:

We are hiring an Enterprise Splunk Platform Administrator to manage, maintain, and optimize our distributed Splunk infrastructure. You will be responsible for ensuring high availability, performance tuning, secure data ingestion, and platform governance across clustered multi-site Splunk environments.

Key Responsibilities

- Architecture &
- Infrastructure Management:

Administer enterprise-grade, distributed, clustered, and multi-site Splunk deployments, including Indexers, Search Heads, Cluster Managers, Deployment Servers, and Universal Forwarders.

- Maintenance &

- Upgrades:

Perform platform upgrades, patching, cluster migrations, health checks, capacity planning, and performance tuning.

- Data Onboarding &

- Engineering:

Lead data onboarding workflows—parsing, indexing, retention policy management, and pipeline optimization across diverse log sources.

- Content &





- Knowledge Objects:

Develop and maintain dashboards, reports, alerts, lookup files, and optimized knowledge objects for business and security teams.

- Troubleshooting:

Diagnose and resolve platform performance bottlenecks, search execution delays, and log ingestion failures.

Candidate Requirements

- Experience:

2+ years of dedicated hands-on experience administering distributed Splunk enterprise environments.

- Mandatory Certification:

Active

Splunk Enterprise Certified Administrator

(or higher).

- Technical Expertise:

Deep knowledge of Splunk architecture, configuration files (props.conf, transforms.conf), index clustering, and search head clustering.

- Solid analytical problem-solving skills and operational communication ability.

📌 Enterprise Splunk Platform Administrator (India)
🏢 NIAD Group
📍 India