Splunk Enterprise/Cloud Administrator

In-scope technologies/products:

Splunk, Linux

Skillsets required:

Strong hands-on experience with Splunk Enterprise and/or Splunk Cloud and certified to architect or consultant level
Experience with monitoring, logging, and observability solutions
Strong experience with data onboarding, parsing, and transformation
Good understanding of Linux platform and infrastructure
Experience in incident, problem, and change management processes
Ability to troubleshoot complex issues and perform root cause analysis
Experience working in enterprise-scale environments

Scope of services:

Maintain Splunk platform (Cloud/ITSI) to meet business and operational requirements
Provide support for production issues, including incident, problem, and change management
Optimise platform performance, data ingestion, and search efficiency
Support platform upgrades, migrations, and onboarding activities
Collaborate with engineering, DevOps, and application teams to onboard workloads and improve observability
Monitor and assess the performance of dashboards, reports, and use cases using tools and SPL
Drive automation and simplification of operational processes
Ensure adherence to security, compliance, and audit requirements
Contribute to service improvement initiatives, including reliability, resilience, and cost optimisation
Deliver optimisation for monitoring, alerting, and observability solutions to support critical applications and services
Participate in on-call/24x7 support rota where required
"no landed resources"