Splunk Administrator

We are looking for a Splunk Cloud Dashboard & Analytics Engineer to design, develop, and maintain Splunk Cloud dashboards and analytics solutions that drive observability and data-informed decisions across engineering and business teams.

The role covers log and metrics ingestion, advanced SPL development, dashboard and visualization design, KPI/SLI monitoring, alerting, data correlation, and observability reporting. You will partner closely with application, infrastructure, and platform teams to onboard new data sources and convert raw machine data into actionable insight.

Key Responsibilities:

• Administer, configure, and optimize the Splunk Cloud environment, including indexes, apps, roles, and data retention.
• Onboard log and metrics data from applications, infrastructure, cloud, and third-party sources using forwarders, HEC, APIs, and add-ons.
• Build advanced SPL searches, correlation logic, data models, lookups, and accelerated reports.
• Design and deliver executive and operational dashboards, visualizations, and glass tables tailored to different audiences.
• Define and implement KPIs, SLIs, and SLOs; build alerting and threshold logic to detect issues before they impact users.
• Correlate data across multiple sources to identify trends, anomalies, root causes, and improvement opportunities.
• Produce observability and performance reports for engineering leadership and business stakeholders.
• Tune searches and dashboards for performance, cost efficiency, and license/ingest optimization.
• Document data onboarding standards, dashboard specifications, and operational runbooks.

Primary Skills:

1. Strong hands-on experience with Splunk Cloud Administration.
2. Advanced expertise in Splunk SPL (Search Processing Language).
3. Proven experience designing and developing Splunk Dashboards & Visualizations.
4. Strong knowledge of log ingestion, data onboarding, and data correlation from multiple sources.
5. Experience with monitoring, observability, KPI/SLI implementation, and analytics-driven insights.