Splunk SME

Position Overview

We are seeking an experienced Splunk Subject Matter Expert to provide hands on administration and support for Splunk and Cribl environments. This role supports a critical need to maintain continuity across logging, monitoring, and compliance operations during a period of team transition.

The environment leverages Cribl as an upstream data routing and processing layer with Splunk as the primary security information and event management platform. The ideal candidate brings strong Splunk expertise along with working experience in Cribl and Linux based systems. Exposure to regulated utility environments is beneficial.

Responsibilities

• Provide day to day administration and monitoring of Splunk and Cribl environments including system health, performance tuning, and capacity planning
• Maintain and support existing Splunk dashboards, alerts, searches, and data inputs while resolving issues as they arise
• Manage onboarding of new data sources through Cribl pipelines ensuring data quality and correct routing prior to indexing in Splunk
• Troubleshoot platform issues across the full logging lifecycle from data source through Cribl routing into Splunk indexing and search layers
• Maintain logging and monitoring configurations aligned to applicable compliance requirements within a regulated environment
• Participate in on call rotation and support scheduled after hours maintenance windows
• Collaborate with team members and leadership to ensure operational continuity during staffing transition
• Support development toward a self service dashboard model for internal stakeholders

Qualifications

• Strong hands on experience with Splunk administration including search, indexing, forwarders, knowledge objects, dashboards, alerts, and role based access control
• Working knowledge of Cribl Stream including routing, enrichment, filtering, and pipeline management
• Experience administering Linux systems including log collection, service management, and system troubleshooting
• Strong problem solving skills with ability to troubleshoot complex issues across the logging platform
• Effective communication skills with the ability to work across technical and non technical stakeholders
• Ability to work in a Central Time Zone aligned schedule in a fully remote capacity
• Availability for occasional after hours support and on call rotation

Tools and Technologies

• Splunk Enterprise or Splunk Cloud
• Cribl Stream
• Linux