Splunk ITSI Developer

Position—Splunk ITSI developer

Location—Remote in US

Duration- Contract

Job Description:Requirements:

• 4–5+ years of Splunk experience.
• 3–5+ years of Splunk IT Service Intelligence development experience mandatory (ITSI).
• 4–8 years of overall industry experience as a technology practitioner (in IT Operations or Security).
• Successful enterprise-level implementation of Splunk Cloud a plus.
• Experience in requirements gathering around the Splunk tool, documenting requirements, requirement analysis, product testing, etc.

Qualifications:

• Prior experience with Splunk Enterprise Cloud support in large enterprises (>5000 servers).
• Experience developing Splunk ITSI glass tables, service trees, correlation searches, KPIs, and notable event aggregation policies.
• Splunk Certification (or equivalent experience) – Preferred.
• Experience with enterprise-scale operations and maintenance environments.
• Minimum 2+ years of experience with rule and advanced logic creation within Splunk.
• Cloud runtime services (e.g., AWS EC2, Lambda, CloudWatch, Azure compute, functions).
• Ability to interface well with end users.
• Strong communication, written, and verbal skills.

Primary Responsibilities:

• As a Splunk Engineer, you will be involved in the deployment or enhancement of enterprise infrastructure monitoring implementation of Splunk’s Cloud solutions that use big data to solve complex IT Operations challenges. Work includes:
• Engineer, configure, administer, and support enterprise observability solutions, including Splunk Cloud, Splunk ITSI, and Splunk Infrastructure Monitoring Enterprise Edition.
• Develop ITSI glass tables, service trees, entity design, KPIs, and correlation searches.
• Develop front-end searches, dashboards, and reports for operations analysts and IT engineers for advanced threat detection using Splunk’s SPL (Search Processing Language).
• Perform root-cause analysis of any issues that arise post-implementation and work on issue resolution.
• Create low-level design artifacts independently and high-level design artifacts with guidance; support prototyping through POCs.
• Expand use cases and onboard new data sources into Splunk.
• Perform Splunk health checks, review deployment architecture and search performance, and make recommendations for system and platform optimization.
• Provide knowledge transfer to operations analysts and IT engineers regarding Splunk usage and performance.
• Partner with risk, compliance, and cybersecurity teams to meet corporate log management and SIEM policies and standards.
• Develop ingestion, onboarding, and management efficiencies through automation and architectural improvements.
• Develop, improve, and automate log management processes.
• Design and implement dashboards and reports to meet business and user requirements.
• Collaborate with various user areas to understand their needs and enhance log and SIEM posture.
• Maintain 24x7 uptime.
• Continually identify and evaluate opportunities to improve performance, availability, and stability.