Splunk System Administrator - Remote

Overview

As a Splunk System Administrator, you will own the health and performance of our Splunk Enterprise environment, ensuring high availability, reliability, and observability.

In Short

• Maintain and monitor Splunk platform (upgrades, patches, health checks).
• Tune performance (index/search optimizations).
• Collaborate with stakeholders to develop and deploy Splunk features and content.
• Troubleshooting & Support: investigate incidents, analyze logs, run diagnostic queries, and resolve issues.
• Manage security and access (SAML/SSO, RBAC, user management).
• Onboard and configure data (indexes, timestamp correction, re-indexing).

Requirements

• 3+ years administering Splunk Enterprise (index & search head clusters, large datasets).
• Splunk Enterprise Certified Admin & Core Certified Advanced Power User.
• Strong SPL, SAML/SSO, RBAC, and Linux CLI troubleshooting skills.
• Experience deploying, managing, and administering self-hosted Splunk instances.
• Experience troubleshooting observability and monitoring pipelines, dashboards, and alerts.
• Strong organizational, problem-solving, and teamwork abilities.

Benefits

• Remote, part-time, shift-based work;
• Cross-cultural work experience and lots of opportunities for networking with teammates who love what they do;
• A comfortable digital office. We use modern digital tools — Miro, Notion, Google Meet, etc.— to make the process of working together seamless;
• Diverse and tight-knit team which is spread out across US, Serbia, Latin America and more.