Splunk Administrator

Description
We are looking for an experienced Splunk Administrator to support and strengthen a critical logging and monitoring environment in Bensalem, Pennsylvania. This position is responsible for keeping the platform reliable, secure, and scalable while enabling visibility across infrastructure, applications, and security operations. The ideal candidate brings strong hands-on expertise in Splunk administration, data onboarding, and performance tuning, along with the ability to work effectively across technical teams.

Responsibilities

Oversee the day-to-day administration of the Splunk platform, including core components such as search nodes, indexing systems, forwarders, deployment services, and clustered environments. Perform platform installation, configuration, version updates, patching, and ongoing health monitoring to maintain a stable and secure environment. Connect and validate log and event data from a wide range of sources, including servers, business applications, network equipment, security technologies, cloud services, and database systems.

Configure and manage data retention settings, index structures, storage usage, licensing consumption, and role-based access to support governance and operational needs. Build and maintain useful searches, visualizations, scheduled reports, and alerting workflows that improve operational awareness and security monitoring. Troubleshoot ingestion issues, system errors, and search inefficiencies while improving overall platform responsiveness and reliability. Enhance Splunk integrations with enterprise and security tools through APIs, scripting, and automation where appropriate.

Partner with security and IT teams to support investigations, incident handling, audit readiness, and compliance-related activities. Requirements
At least 5 years of hands-on experience administering Splunk Enterprise in production environments. Strong understanding of Splunk architecture, including distributed deployments and core configuration management. Hands-on experience supporting indexers, search heads, forwarders, and deployment servers. Proven ability to onboard, normalize, and troubleshoot data from multiple technology sources.

Solid analytical and problem-solving skills with the ability to document findings and communicate clearly with technical stakeholders. Experience working with Linux, networking concepts, and log management best practices. Familiarity with automation or scripting to streamline administration and operational support. Splunk certification or experience with Splunk Enterprise Security, Splunk Cloud, or related security monitoring solutions is preferred. Technology Doesn't Change the World, People Do.

Robert Half is the world's first and largest specialized talent solutions firm that connects highly qualified job seekers to opportunities at great companies. We offer contract, temporary and permanent placement solutions for finance and accounting, technology, marketing and creative, legal, and administrative and customer support roles. Robert Half works to put you in the best position to succeed. We provide access to top jobs, competitive compensation and benefits, and free online training. Stay on top of every opportunity - whenever you choose - even on the go.

Download the Robert Half app and get 1-tap apply, notifications of AI-matched jobs, and much more. All applicants applying for U.S. job openings must be legally authorized to work in the United States. Benefits are available to contract/temporary professionals, including medical, vision, dental, and life and disability insurance. Hired contract/temporary professionals are also eligible to enroll in our company 401(k) plan. Visit roberthalf.gobenefits.net for more information.
2025 Robert Half. An Equal Opportunity Employer. M/F/Disability/Veterans.

By clicking "Apply Now," you're agreeing to Robert Half's Terms of Use and Privacy Notice.