Splunk & Cribl Platform Engineer
Sameer KhanUnited StatesSENIORPosted 7d ago
SplunkCriblSplunk EnterpriseSplunk CloudIndexerSearch Head ClusteringForwarder ArchitectureSPLSecurity Log IngestionSIEMLinux AdministrationProduction TroubleshootingIncident ResponseRoot Cause Analysis
About the Role
We are seeking a senior Splunk & Cribl Platform Engineer for a 12+ month contract position. This role requires hands-on experience administering large-scale Splunk Enterprise/Splunk Cloud environments and Cribl data pipelines.
Key Responsibilities
• Administer large-scale Splunk Enterprise/Splunk Cloud environments
• Manage Cribl data pipelines
• Implement indexer and search head clustering
• Configure forwarder architecture
• Optimize SPL queries
• Handle security log ingestion and SIEM enablement
• Perform Linux administration tasks
• Troubleshoot production issues
• Respond to incidents and conduct root cause analysis
Requirements
• 5+ years of hands-on experience with Splunk Enterprise/Splunk Cloud
• Strong expertise in indexer and search head clustering
• Experience with forwarder architecture
• Proficiency in SPL optimization
• Knowledge of security log ingestion and SIEM enablement
• Linux administration skills
• Experience with production troubleshooting
• Incident response and root cause analysis capabilities
• Cribl administration experience is mandatory