Microsoft 365 & Splunk Administrator

Microsoft 365 & Splunk Administrator Location: Des Moines, IA (Onsite) Contract (C2C) Job Description: Role Summary The Splunk & Microsoft 365 Administrator will be responsible for managing, monitoring, and optimizing the enterprise Splunk platform and Microsoft 365 environment. The role includes administration of Microsoft Exchange Online, Teams, SharePoint Online, OneDrive, Azure AD/Entra ID, and Microsoft security solutions, while ensuring the reliability, security, and performance of Splunk infrastructure used for log management, monitoring, and security analytics.The ideal candidate should possess strong troubleshooting skills, experience supporting enterprise collaboration platforms, and expertise in SIEM, monitoring, and cloud administration. Key Responsibilities Splunk Administration • · Install, configure, and maintain Splunk Enterprise and Splunk Cloud environments. • · Manage Splunk Indexers, Search Heads, Forwarders, Deployment Servers, and Clusters. • · Develop and maintain dashboards, reports, alerts, and monitoring solutions. • · Configure log ingestion from servers, applications, network devices, and cloud platforms. • · Optimize Splunk performance, retention policies, and indexing strategies. • · Perform troubleshooting and root cause analysis of Splunk platform issues. • · Support security monitoring, threat detection, and compliance reporting requirements. • · Design and implement Splunk use cases for operational and security monitoring. • · Work with infrastructure and security teams to onboard new data sources. Microsoft 365 Administration • · Administer Microsoft 365 tenant, including Exchange Online, Teams, SharePoint Online, OneDrive, and Microsoft Purview. • · Manage user provisioning, licensing, groups, and role assignments through Microsoft Entra ID (Azure AD). • · Configure and support Microsoft Teams policies, calling, meetings, and collaboration services. • · Administer Exchange Online mailboxes, mail flow, distribution groups, and hybrid configurations. • · Manage SharePoint Online sites, permissions, and document management solutions. • · Monitor service health and proactively address performance or availability issues. • · Support Microsoft Defender and security compliance initiatives. • · Implement data retention, DLP, eDiscovery, and governance policies. • · Coordinate tenant migrations, upgrades, and adoption initiatives. Security & Compliance • · Ensure adherence to security standards and compliance requirements. • · Support identity and access management using Entra ID and Conditional Access. • · Configure MFA, SSO, and security policies for Microsoft 365 services. • · Monitor and investigate security alerts from Splunk and Microsoft Security tools. • · Participate in security audits and remediation activities. Operations & Support • · Support Incident, Problem, Change, and Request Management processes. • · Troubleshoot complex infrastructure and application issues. • · Create and maintain operational documentation and knowledge articles. • · Participate in on-call and after-hours support activities as required. • · Collaborate with cross-functional teams to ensure service availability and customer satisfaction. Required Technical Skills Splunk • · Splunk Enterprise • · Splunk Cloud • · Splunk Enterprise Security (ES) • · Splunk ITSI (preferred) • · Universal Forwarders • · Search Processing Language (SPL) • · Dashboard Development • · Log Management & Monitoring • · Data Onboarding & Parsing • · Alerting & Reporting Microsoft 365 • · Exchange Online • · Microsoft Teams • · SharePoint Online • · OneDrive for Business • · Microsoft Entra ID (Azure AD) • · Microsoft Defender • · Microsoft Purview • · Intune (preferred) • · Power Platform (preferred) Identity & Security • · SSO • · MFA • · Conditional Access • · RBAC • · Zero Trust Security • · Identity Governance • Operating Systems & Scripting • · Windows Server Administration • · Linux Administration • · PowerShell • · Basic Python or scripting knowledge ITSM & Monitoring • · ServiceNow • · ITIL Processes • · Monitoring & Alerting Platform