What are the responsibilities and job description for the Splunk Admin position at Northern Base?
Role: Splunk Admin
Location: Columbus, OH (Remote)
Employment Type: Full-Time
Experience: 6–8 years
Must-Have Qualifications:
- 8 years of overall IT experience
- 5 years of hands-on experience in Splunk Administration and Data Ingestion
- Strong experience with enterprise-scale observability, logging, and monitoring platforms
- Hands-on experience with Splunk and Cribl ingestion workflows, pipeline execution, monitoring, and troubleshooting
- Strong experience with Splunk Enterprise and/or Splunk Cloud
- Hands-on experience with Splunk data onboarding, parsing, routing, indexing, and forwarding
- Strong experience with Cribl Stream administration, pipeline execution, monitoring, and support
- Strong proficiency in SPL and RegEx
- Programming/scripting experience with Python, Bash, or PowerShell
- Knowledge of Networking, Linux/Windows, AWS/Azure/GCP, and security fundamentals
- Experience supporting production environments and critical incidents
- Willingness to participate in a 24x7 on-call rotation
- Splunk Power User Certification is mandatory
- Experience leading Splunk and Cribl data ingestion initiatives across teams
- Experience with ingestion onboarding, pipeline execution, monitoring, maintenance, and troubleshooting
- Experience establishing logging, telemetry, and data governance standards
- Experience developing automation for ingestion, monitoring, and operational activities
- Experience with incident management, root cause analysis, and production support
- Experience integrating ingestion platforms with observability tools, dashboards, alerting systems, and data lakes
- Experience leading technical discussions with clients and stakeholders
- Proven experience mentoring and coaching junior engineers and analysts
- Strong verbal and written communication skills