Splunk Administrator
Role Overview
The role is responsible for hands-on administration, configuration, optimization, and day-to-day operation of the Splunk platform in an enterprise environment.
The primary focus is Splunk platform administration rather than SOC monitoring, SIEM operations, or incident response without hands-on Splunk administration experience.
Key Skills for This Role
Full Job Posting
About the Role
The role is responsible for hands-on administration, configuration, optimization, and day-to-day operation of the Splunk platform in an enterprise environment.
The primary focus is Splunk platform administration rather than SOC monitoring, SIEM operations, or incident response without hands-on Splunk administration experience.
Location
- The listed location is Doha, Qatar.
Key Responsibilities
- Administer and maintain Splunk Enterprise and Splunk Cloud environments.
- Manage indexers, search heads, forwarders, deployment servers, and Splunk clusters.
- Configure forwarders and perform data onboarding, parsing, and indexing from infrastructure and security sources.
- Manage Splunk configuration files, platform health, performance, capacity, licensing, and storage utilization.
- Support upgrades, patching, maintenance, and troubleshooting of indexing, search, and ingestion issues.
- Develop SPL searches, dashboards, reports, and alerts.
- Implement role-based access control and LDAP, SAML, or MFA integrations.
- Support Splunk Enterprise Security, security data onboarding, and log integrations from enterprise and cloud sources.
Must-Have Skills
- Splunk Enterprise, Splunk administration, indexers, search heads, Universal Forwarders, and Heavy Forwarders.
- Deployment Server, Indexer Clustering, Search Head Clustering, Splunk configuration, and data onboarding.
- SPL, performance tuning, capacity planning, licensing, and Linux.
Preferred Qualifications
- Splunk Enterprise Security, CIM, custom technology add-ons, AWS, Azure, or GCP log onboarding experience is advantageous.
- Python, Bash, REST API, or Splunk SOAR/Phantom experience is advantageous.
- Splunk Enterprise Certified Admin or Splunk Core Certified Power User certification is preferred.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at HyperThink Systems
Azure Data Architect_Oil & Gas
, QAT
The employer is seeking an Azure Data Architect specializing in Oil & Gas to design and implement data architecture, models, governance, and ETL processes. Candidates should bring strong data architecture and modeling ex
Change Management Specialist _)Prosci/ADKAR)
, QAT
The employer is seeking Change Management Specialists to support transformation initiatives across people, process, technology, and digital programs. The work includes impact assessments, stakeholder engagement, adoption
Program Manager
Doha, QAT
HyperThink Systems is seeking an experienced IT Project Manager to lead enterprise application, systems integration, and IT infrastructure projects for a client in Qatar. The role requires 13+ years of IT project managem
Senior Sharepoint Administrator
, QAT
The employer is seeking a Senior SharePoint Administrator for a government ministry project in Qatar. The role covers administration, governance, automation, platform health, and migration across SharePoint and Microsoft
AI Sales Associate
, QAT
HyperThink Systems is seeking an AI Sales Associate to grow AI, Generative AI, and enterprise technology consulting sales. The role covers lead generation, pipeline development, client engagement, solution presentations,
Microsoft Copilot Studio Developer – Azure AI
Doha, QAT
The employer is seeking a Microsoft Copilot Studio Developer to build enterprise AI agents and copilots for a large-scale energy-sector transformation program in Qatar. Candidates need hands-on Microsoft Power Platform e
Azure Data Architect_Oil & Gas
, QAT
Change Management Specialist _)Prosci/ADKAR)
, QAT
Program Manager
Doha, QAT
Senior Sharepoint Administrator
, QAT
AI Sales Associate
, QAT
Microsoft Copilot Studio Developer – Azure AI
Doha, QAT