{"id":4207226,"url":"https://alion.io/job/hcltech-track-manager-splunk-bash-scripting-language-python-2","title":"Track Manager - Splunk, Bash (Scripting Language), Python","company":{"id":225,"name":"HCLTech","domain":"hcltech.com","url":"https://alion.io/company/hcltech","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Backend","role_family":"Backend","seniority":null,"employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Noida, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"Git","optional":false},{"name":"ITIL","optional":false},{"name":"LDAP","optional":false},{"name":"Linux","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Self-Healing","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"CI/CD","optional":true},{"name":"Kubernetes","optional":true},{"name":"ServiceNow","optional":true}],"status":"live","first_seen_at":"2026-11-12T23:56:07Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-12T23:56:07Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Job Summary\nWe are looking for an experienced Splunk L3 Administrator responsible for administration, engineering, troubleshooting, optimization, and operational support of enterprise Splunk environments. The candidate should have strong expertise across Splunk Enterprise, Splunk Universal/Heavy Forwarders, Search Head Clustering, Indexer Clustering, data onboarding, SPL, security, performance tuning, and platform upgrades. The role will act as an L3 escalation point, drive complex problem resolution, support major incidents, implement automation, and ensure the Splunk platform remains highly available, secure, scalable, and optimized.\nKey Responsibilities\nKey Responsibilities Splunk Administration & Engineering Administer and support large-scale Splunk Enterprise environments across production and non-production. Manage Search Heads, Indexers, Cluster Managers, Deployment Servers, License Managers, Heavy Forwarders, and Universal Forwarders. Configure and maintain Indexer Clustering and Search Head Clustering. Perform installation, configuration, patching, upgrades, migrations, and platform lifecycle activities. Manage Splunk configuration files including inputs.conf, outputs.conf, props.conf, transforms.conf, server.conf, indexes.conf, and limits.conf. Perform Splunk application and configuration deployment through appropriate deployment mechanisms. Data Onboarding & Integration Onboard data from Windows, Linux, network devices, security platforms, applications, databases, cloud platforms, APIs, and syslog sources. Configure source types, field extraction, event parsing, timestamp recognition, line breaking, filtering, and routing. Troubleshoot ingestion issues across Universal Forwarders, Heavy Forwarders, syslog infrastructure, and Splunk Indexers. Monitor ingestion volume and licensing consumption and optimize data onboarding where required. SPL, Dashboards & Monitoring Develop and troubleshoot complex Splunk Search Processing Language (SPL) queries. Create and optimize dashboards, reports, alerts, scheduled searches, and knowledge objects. Optimize inefficient searches to improve platform performance. Support operational and application teams in establishing monitoring and alerting use cases. Performance & Capacity Management Monitor overall Splunk platform health, indexing rates, search performance, resource utilization, and ingestion latency. Perform capacity planning for compute, storage, daily ingestion, retention, and license utilization. Troubleshoot blocked queues, skipped searches, indexing delays, high CPU/memory utilization, and search performance issues. Use Splunk Monitoring Console and internal logs for proactive health monitoring and troubleshooting. Security & Access Management Implement and maintain RBAC, user roles, authentication, and authorization. Support integration with enterprise identity solutions such as LDAP/SAML/SSO. Manage certificates and TLS configuration for secure Splunk communication. Ensure adherence to enterprise security, compliance, hardening, and audit requirements. Incident, Problem & Change Management Act as L3 SME and escalation point for complex Splunk platform issues. Participate in P1/P2 major incident troubleshooting and recovery. Perform root cause analysis and develop corrective/preventive actions. Execute production changes following ITIL-based change management processes. Work with application, infrastructure, network, security, database, and cloud teams for end-to-end troubleshooting. Automation Develop automation using Shell scripting, Python, REST APIs, Git, and Ansible where applicable. Automate repetitive Splunk administration, health checks, configuration deployment, and operational activities. Identify opportunities for proactive monitoring and self-healing.\nSkill Requirements\nRequired Technical Skills Mandatory: Splunk Enterprise Administration Search Head Clustering Indexer Clustering Universal and Heavy Forwarders Splunk Deployment Server Data onboarding and ingestion troubleshooting Advanced SPL props.conf and transforms.conf Index and retention management Splunk Monitoring Console RBAC / LDAP / SAML Linux administration Shell scripting REST APIs Performance tuning and capacity management Production incident troubleshooting Good to Have: Splunk Enterprise Security (ES) Splunk IT Service Intelligence (ITSI) Splunk Observability AWS / Azure integrations Kubernetes/container monitoring Ansible Python Git / CI/CD Syslog platforms ServiceNow integration\nOther Requirements\nRequired Technical Skills Mandatory: Splunk Enterprise Administration Search Head Clustering Indexer Clustering Universal and Heavy Forwarders Splunk Deployment Server Data onboarding and ingestion troubleshooting Advanced SPL props.conf and transforms.conf Index and retention management Splunk Monitoring Console RBAC / LDAP / SAML Linux administration Shell scripting REST APIs Performance tuning and capacity management Production incident troubleshooting Good to Have: Splunk Enterprise Security (ES) Splunk IT Service Intelligence (ITSI) Splunk Observability AWS / Azure integrations Kubernetes/container monitoring Ansible Python Git / CI/CD Syslog platforms ServiceNow integration","description_format":"text","description_chars":5204,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","Managed IT Services (MSP)","Systems Integrators","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-11-12T23:56:07Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":14,"reasons":["conf:2","win:early","comp:brand"],"computed_at":"2026-11-13T02:03:47Z"},"pay":null,"html_url":"https://alion.io/job/hcltech-track-manager-splunk-bash-scripting-language-python-2","json_url":"https://alion.io/job/hcltech-track-manager-splunk-bash-scripting-language-python-2.json","meta":{"generated_at":"2026-11-13T02:03:47Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4289,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":225},"rest":"https://alion.io/mcp/rest/get_company?id=225"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhcltech-track-manager-splunk-bash-scripting-language-python-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhcltech-track-manager-splunk-bash-scripting-language-python-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhcltech-track-manager-splunk-bash-scripting-language-python-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hcltech-track-manager-splunk-bash-scripting-language-python-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhcltech-track-manager-splunk-bash-scripting-language-python-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4207226}},{"tool":"search_jobs","arguments":{"company":"hcltech.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4207226},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}