Description The Opportunity: Serve as the Splunk specialist responsible for governing and continuously improving enterprise log analytics, event correlation, operational intelligence, and observability data used by EII.
Responsibilities: - Administer, secure, optimize, and govern the Splunk platform and supporting infrastructure.
- Define standards for data onboarding, ingestion, parsing, normalization, indexing, retention, tagging, access, and ownership.
- Collect and correlate logs, metrics, events, and telemetry across infrastructure, applications, cloud, network, security, and business services.
- Build dashboards, service-health views, alerts, reports, scorecards, and operational intelligence use cases.
- Integrate Splunk with SolarWinds, ThousandEyes, ServiceNow, the CMDB, cloud-native tools, security platforms, automation, and the EII analytical plane.
- Support incident response, major outage investigations, problem management, root-cause analysis, anomaly detection, and recurring-pattern analysis.
- Maintain platform resilience, upgrades, capacity, licensing, security, auditability, and lifecycle plans.
Principal outputs: - Splunk platform architecture and standards
- Operational intelligence dashboards and service-health views
- Curated log, event, metric, and observability datasets
- Event-correlation, anomaly, and recurring-pattern reports
- Telemetry coverage, quality, and retention scorecards
- Incident and root-cause evidence packs
- Platform health, capacity, licensing, and lifecycle plans
Requirements: - Demonstrated experience administering and supporting Splunk Enterprise in a large, distributed environment.
- Strong SPL skills and experience with data inputs, forwarders, indexes, source types, parsing, field extraction, search, alerts, and dashboards.
- Working knowledge of Windows, Linux, networking, infrastructure, cloud, databases, logs, metrics, and event data.
- Experience with platform security, role-based access, retention, capacity planning, upgrades, troubleshooting, and data-quality controls.
- Ability to support incident investigations and communicate technical findings to operational and leadership stakeholders.
Preferred Skills: - Splunk IT Service Intelligence, Splunk Enterprise Security, Splunk Observability Cloud, and Splunk SOAR.
- OpenTelemetry, REST APIs, Python, PowerShell, SQL, automation, and data-pipeline integration.
- ServiceNow, CMDB, SolarWinds, ThousandEyes, cloud-native platforms, and security-tool integrations.
- Service mapping, event correlation, machine learning, AIOps, anomaly detection, forecasting, and executive dashboard design.
Humble. Hungry. Smart. Does this sound like you? Do others describe you as being a down-to-earth achiever? Someone who thinks outside the box and always strives to do more than what is required? Someone who sees the bigger picture? You sound brilliant to work with!
#LI-AD1
