Systems Monitoring Engineer

Splunk Administrator

A large financial organization in Tel Aviv is looking for a Splunk Administrator.

Hybrid model - two days a week working from home.

Role Overview:

We are seeking an experienced Splunk Administrator to join our infrastructure team and manage a large-scale on-prem Splunk environment. This role requires deep understanding of distributed architectures, the ability to identify and resolve performance issues, and the skill to align system operations with business and security requirements.

Key Responsibilities:

• Manage and maintain a complex Splunk on-prem deployment.
• Oversee Splunk components including Indexers, Search Heads, Forwarders, and Deployer.
• Utilize ITSI for monitoring, automation, and generating actionable operational insights.
• Work with Outcold (or similar tools) to enhance automation and monitoring processes – a significant advantage.
• Optimize system performance through index tuning, storage management, and retention policy configuration.
• Troubleshoot complex performance issues, connection problems, and high-volume data flows.
• Ensure information security best practices, including user permissions, audit logging, and compliance.
• Collaborate with DevOps, Network, and Security teams to implement new solutions and support existing infrastructure.
• Create dashboards, alerts, and reports tailored to technical and business needs.

Required Skills & Experience:

• Proven experience (3–5 years) in Splunk Administration in a large on-prem environment – a must
• Strong knowledge and hands-on experience with ITSI – a plus
• Familiarity with Outcold or other automation/CI-CD tools – a plus.
• Advanced proficiency in Linux (RedHat/CentOS/Ubuntu).
• Experience writing SPL queries, custom reports, and dashboards.
• Understanding of network protocols, Syslog, and integration with third-party systems (databases, APIs).
• Ability to work in cross-functional teams and communicate effectively with technical and business stakeholders.

Personal Attributes:

• Strong analytical and problem-solving skills for complex issues.
• Attention to detail and thorough understanding of system processes and configurations.
• Proactive approach to performance improvement and process optimization.
• Commitment to staying up-to-date with the latest Splunk technologies and best practices.