Senior Splunk Administrator

<div class="content-intro"><div class="elementToProof"> <p>Veeam is the Data and AI Trust Company, specializing in helping organizations ensure their data and AI are fully understood, secured, and resilient to enable the acceleration of safe AI at scale. As the market leader in both data resilience and data security posture management, Veeam is built for the convergence of identity, data, security, and AI risk. Headquartered in Seattle with offices in more than 30 countries, Veeam protects over 550,000 customers worldwide, who trust Veeam to keep their businesses running. Join us as we go fearlessly forward together, growing, learning, and making a real impact for some of the world’s biggest brands.</p> </div></div><h4><span style="color: rgb(255, 255, 255);"><strong>#LI-REMOTE #LI-JC2</strong></span></h4> <h4><strong>About the Role</strong></h4> <p><span data-contrast="auto">We are looking for a Senior Splunk Engineer to own and evolve Veeam’s Splunk environment across both on-premises and Splunk Cloud. This role will manage platform health, data ingestion, search performance, storage efficiency, dashboards, alerts, compliance support, and integrations across a broad enterprise environment.</span><span data-ccp-props="{}"> </span></p> <p><span data-contrast="auto">The ideal candidate enjoys working at the center of infrastructure, security, cloud, monitoring, automation, and operational data, and can partner with infrastructure, cloud, security, application, audit, and service management teams. This is a high-impact role for someone who enjoys turning complex machine data into reliable operational insight.</span><span data-ccp-props="{}"> </span></p> <h4 id="id-📝JobDescription&JobPostGuidelines-WhatYou’llDo.1"><strong>What You’ll Do</strong></h4> <ul> <li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Manage, maintain, and improve Veeam’s Splunk Enterprise and Splunk Cloud environments.</span> </li> <li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Design and support scalable log ingestion patterns across infrastructure, cloud platforms, applications, SaaS tools, security systems, and business services. </li> <li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Monitor and improve platform health, search performance, index utilization, storage efficiency, retention, data quality, and overall reliability. </li> <li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Partner with infrastructure, cloud, security, networking, application, audit, and service management teams to deliver trusted logging and observability capabilities. </li> <li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Build and maintain dashboards, alerts, reports, saved searches, field extractions, lookups, and knowledge objects that help teams identify and resolve issues faster. </li> <li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Lead data onboarding efforts, including source validation, parsing, sourcetype strategy, index design, field extraction, CIM alignment, HEC integrations, and forwarder configuration. </li> <li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Troubleshoot complex issues across Splunk architecture, operating systems, network paths, certificates, proxies, cloud services, and data pipelines. </li> <li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Support security, compliance, audit, and operational reporting use cases where accurate and searchable log data is critical. </li> <li data-leveltext="" data-font="Symbol" data-listid="4" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Define, document, and improve Splunk standards, runbooks, support procedures, onboarding patterns, and platform best practices.<span data-ccp-props="{}"> </span></li> </ul> <h4 id="id-📝JobDescription&JobPostGuidelines-TechnologiesYou’llWorkWith.1"><strong>Technologies You’ll Work With</strong></h4> <ul> <li data-leveltext="" data-font="Symbol" data-listid="5" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="auto">Splunk Enterprise</span> </li> <li data-leveltext="" data-font="Symbol" data-listid="5" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Splunk Cloud </li> <li data-leveltext="" data-font="Symbol" data-listid="5" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Splunk Search Processing Language (SPL) </li> <li data-leveltext="" data-font="Symbol" data-listid="5" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Splunk Universal Forwarders, Heavy Forwarders, Deployment Server, Search Heads, Indexers </li> <li data-leveltext="" data-font="Symbol" data-listid="5" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Splunk HTTP Event Collector (HEC) </li> <li data-leveltext="" data-font="Symbol" data-listid="5" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Splunk apps, add-ons, dashboards, alerts, reports, lookups, data models, macros, tags, event types, and field extractions </li> <li data-leveltext="" data-font="Symbol" data-listid="5" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Windows and Linux server environments </li> <li data-leveltext="" data-font="Symbol" data-listid="5" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Azure, Azure Event Hub, Azure Monitor, Log Analytics, and cloud-native logging patterns </li> <li data-leveltext="" data-font="Symbol" data-listid="5" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">REST APIs, webhooks, and automation frameworks </li> <li data-leveltext="" data-font="Symbol" data-listid="5" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">PowerShell, Python, Bash, or similar scripting languages </li> <li data-leveltext="" data-font="Symbol" data-listid="5" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">ServiceNow, Jira, or similar IT service management and work-tracking tools </li> <li data-leveltext="" data-font="Symbol" data-listid="5" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Observability, monitoring, security logging, compliance logging, and audit support workflows<span data-ccp-props="{}"> </span></li> </ul> <h4 id="id-📝JobDescription&JobPostGuidelines-WhatYou’llDo.1"><strong>What You’ll Bring</strong></h4> <ul> <li data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="6" data-aria-level="1"><span data-contrast="auto">Senior-level experience administering, engineering, or architecting Splunk in an enterprise environment.</span> </li> <li data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="6" data-aria-level="1">Hands-on experience with Splunk Enterprise, Splunk Cloud, or both. </li> <li data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="6" data-aria-level="1">Strong understanding of Splunk architecture, including forwarders, indexers, search heads, deployment servers, apps, technical add-ons, indexes, sourcetypes, parsing, and retention. </li> <li data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="6" data-aria-level="1">Experience onboarding data from multiple source types, including servers, network devices, cloud platforms, applications, SaaS tools, APIs, and security systems. </li> <li data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="6" data-aria-level="1">Strong SPL skills, including the ability to create, troubleshoot, tune, and optimize searches, dashboards, reports, and alerts. </li> <li data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="6" data-aria-level="1">Experience improving data quality, field extraction accuracy, search efficiency, storage usage, and platform stability. </li> <li data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="6" data-aria-level="1">Strong troubleshooting skills across infrastructure, networking, operating systems, certificates, proxies, authentication, and distributed systems. </li> <li data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="6" data-aria-level="1">Experience using scripting or APIs to automate repetitive tasks, reduce manual effort, and improve platform reliability. </li> <li data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="6" data-aria-level="1">Ability to communicate clearly with technical and non-technical stakeholders. </li> </ul> <h4 id="id-📝JobDescription&JobPostGuidelines-WhatYou’llDo.1"><strong>Bonus Skills</strong></h4> <ul> <li data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="5" data-aria-level="1"><span data-contrast="auto">Splunk certifications such as Splunk Core Certified Power User, Advanced Power User, Enterprise Admin, Cloud Admin, Architect, or Consultant. Relevant security certifications are also desirable.</span> </li> <li data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="5" data-aria-level="1">Experience with Splunk Enterprise Security, Edge Processor, or search workload optimization. </li> <li data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="5" data-aria-level="1">Experience supporting SOX, audit, compliance, security operations, or evidence collection use cases. </li> <li data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="5" data-aria-level="1">Experience with Azure Event Hub, cloud-to-cloud data ingestion, HEC architecture, load balancing, and high availability patterns. </li> <li data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="5" data-aria-level="1">Experience with CIM, data models, tstats, summary indexing, data quality governance, and dashboard optimization. </li> <li data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="5" data-aria-level="1">Experience creating internal training, documentation, onboarding guides, or enablement materials for Splunk users. </li> <li data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}" data-aria-posinset="5" data-aria-level="1">Familiarity with Veeam products, backup infrastructure monitoring, or security event forwarding.</li> </ul><div class="content-pay-transparency"><div class="pay-input"><div class="description"><p><span style="font-size: 16px;"><strong>What you'll get</strong></span></p> <ul> <li><span style="font-size: 16px;"><span data-teams="true">Unlimited paid time off, 12 paid holidays including 4 global VeeaMe Days for self-care and 24 paid volunteer hours annually through Veeam Cares</span></span></li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf" style="font-size: 16px;" data-uuid="a78978dc-ac89-45cb-90d8-046512111001"><span style="font-size: 16px;">Paid parental leave: 8 weeks for all parents, 16 weeks for birthing parents</span></li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf" style="font-size: 16px;" data-uuid="c1532033-276f-4e8a-a3b5-e95a41390077"><span style="font-size: 16px;">Medical, dental, and vision coverage starting on your first day</span></li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf" style="font-size: 16px;" data-uuid="269bfa66-2d60-4598-8e5b-4cca247a02cd"><span style="font-size: 16px;">Mental health support, therapy sessions, and digital wellness tools via our Employee Assistance Program</span></li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf" style="font-size: 16px;" data-uuid="5f78a25b-2b13-4e0c-8a27-7b2f06f8af85"><span style="font-size: 16px;">401(k) retirement plan with company matching contributions</span></li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf" style="font-size: 16px;" data-uuid="72318735-b901-4780-8fd3-4c5b19dc96de"><span style="font-size: 16px;">Fertility, adoption, and surrogacy support through Maven, plus paid volunteer time</span></li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf" style="font-size: 16px;" data-uuid="ab8637f1-df99-4bd9-ac2a-1038c17e946d"><span style="font-size: 16px;">AirVet: 24/7 virtual veterinary care at no cost</span></li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf" style="font-size: 16px;" data-uuid="acc447d4-7091-44ec-85c6-7041bf41a6c9"><span style="font-size: 16px;">Legal services, identity protection, and supplemental health insurance options</span></li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf" style="font-size: 16px;" data-uuid="f1cae164-1753-4613-9116-6f6cbaa77f39"><span style="font-size: 16px;">Tax-advantaged spending accounts for healthcare, dependent care, and commuting</span></li> <li class="___ccc16d0 fje8fi8 f1ng9h0j f1bwykku f18jd3zf" style="font-size: 16px;" data-uuid="2b56323b-b405-4551-b6ce-3aaf737adb5a"><span style="font-size: 16px;">Opportunities to learn and grow through on-demand libraries (LinkedIn Learning, O’Reilly), mentoring, workshops, and learning events like our annual Global Day of Learning</span></li> </ul> <p><span style="font-size: 16px;"><strong>Compensation Transparency</strong></span></p> <p><span style="font-size: 16px;">Veeam is committed to pay transparency and equitable compensation. For this role, the compensation range below reflects the expected total target compensation (TTC), inclusive of base pay and a competitive performance-based bonus. For roles with a commission plan, the compensation range represents On Target Earnings (OTE), which includes base salary plus variable commission. When determining compensation, Veeam takes into consideration factors such as experience, education, skills, and geographic zone. Offers are typically made below the midpoint of the range.</span></p> <p><span style="font-size: 16px;">In addition to compensation, Veeam provides a comprehensive benefits package,