Description

You will engineer, configure, and support the enterprise observability solution using Splunk Cloud and ITSI.

This role is on-site.

Responsibilities

• Develop ITSI glass tables, service trees, entity designs, KPIs, and correlation searches.
• Write SPL queries for front-end searches, dashboards, and reports to support threat detection.
• Perform root-cause analysis on post-implementation issues and develop fixes.
• Design low-level artifacts independently and prototype solutions via POCs.
• Manage Splunk health checks, optimizing search performance and deployment architecture.

Required Skills

• 5+ years of experience in enterprise-scale operations and maintenance environments.
• Expertise developing ITSI glass tables, service trees, and correlation searches.
• Proficiency with Splunk Cloud and Splunk ITSI.
• Experience with advanced logic creation within Splunk Cloud runtime services.
• Familiarity with Entity Design principles.
• Experience with AWS EC2, Lambda, CloudWatch, and Azure.
• Ability to partner with risk, compliance, and cybersecurity teams on log management standards.

Preferred Skills

• Strong written and verbal communication skills for end-user interfacing.
• Experience developing ingestion, onboarding, and management efficiencies through automation.

Key Skills

Education

Any Graduate