Job Description
We are looking for a
Splunk Data Administrator
this is Permanent role in
Melbourne
.
Required Skills: n
n
5–10 years experience with Splunk administration and data onboarding (or equivalent depth).
n
Robust practical knowledge of:
n
Field extraction (regex, JSON/KV extraction), and troubleshooting parsing issues
n
TA
installation/configuration
and deployment patterns across Splunk tiers
n
Experience with complex Splunk architectures:
n
Indexer clusters, SH/SHC, forwarder management, deployment server
n
Hybrid patterns (on-prem + cloud), connectivity, and ingestion strategies
n
Comfortable writing and validating SPL for data quality and CIM compliance.
n
Solid log source knowledge across common domains:
n
Cloud: AWS/Azure/GCP logging patterns (nice-to-have)
n
n
All candidates should have full working rights in Australia. Only shortlisted candidates will be contacted for this role.
J-*-Ljbffr

📌 Data Administrator Melbourne
🏢 ITbility
📍 Melbourne