System Administrator

Client is seeking an experienced professional responsible for onboarding and normalizing data in a large-scale on-premises Splunk environment. The role involves collaborating with Engineers and Architects to deliver standardized log-based monitoring and observability services and ensuring log sources provide value to various use cases.

Key Responsibilities:

• Set up and manage data sources, configuring Splunk components to collect logs from various systems and methods.
• Define data input pipelines, data parsing rules, field extractions, and normalization tasks for accurate downstream data processing.
• Monitor and troubleshoot data collection and processing issues.
• Identify and resolve data quality issues to ensure data consistency and accuracy.
• Implement data cleansing and normalization processes when necessary.

Minimum Qualifications:

• 5+ years of experience in Splunk data administration within an enterprise security environment.
• Strong knowledge of Splunk architecture, components, administration, and configuration.
• Expertise in Splunk Processing Language (SPL).
• Proficiency in log collection methods, data parsing, and field extraction.
• Understanding of data security best practices and regulatory compliance requirements.
• Excellent communication skills to influence decisions and collaborate across teams.

Preferred Qualifications:

• 5+ years of experience in highly regulated industries (Telecom, Financial, etc.).
• 5+ years of experience in IT and security-related disciplines.
• Splunk Certified Enterprise Admin.