Senior Splunk Engineer

Job Description & Summary:  We are seeking an experienced Splunk Engineer with strong expertise in Splunk administration, data onboarding, data integration, and Splunk IT Service Intelligence (ITSI). The ideal candidate will have hands-on experience in designing, implementing, and supporting enterprise monitoring and observability solutions using Splunk technologies. 

Responsibilities: 

• Design, develop, and maintain Splunk platforms and monitoring solutions. 

• Perform Splunk data onboarding from various sources including servers, applications, cloud platforms, APIs, and network devices. 

• Configure and manage data integration pipelines for log ingestion and normalization. 

• Develop and optimize Splunk searches, dashboards, reports, alerts, and correlation searches. 

• Create and manage KPIs, glass tables, and service analyzers in Splunk ITSI. 

• Implement event correlation and notable event management in Splunk ITSI. 

• Monitor Splunk platform health, performance, and scalability. 

• Troubleshoot data ingestion, parsing, indexing, and search performance issues. 

• Work closely with infrastructure, application, and operations teams to gather monitoring requirements. 

• Develop automation scripts using Python for operational tasks, integrations, and data processing. 

• Ensure best practices for Splunk architecture, security, and governance are followed. 

• Support production incidents and provide root cause analysis when required. 

Mandatory skill sets: 

• Minimum 5 years of hands-on experience in Splunk. 

• Strong experience in Splunk data onboarding and data integration. 

• Minimum 3 years of hands-on experience in Splunk ITSI. 

• Strong understanding of Splunk architecture, indexing, forwarders, search heads, and deployment management. 

• Experience creating: 

• Correlation searches 

• KPIs 

• Service analyzers 

• Notable event aggregations 

• ITSI dashboards and glass tables 

• Good understanding of SPL (Search Processing Language). 

• Experience troubleshooting Splunk ingestion and search-related issues. 

• Good communication and stakeholder management skills. 

Preferred skill sets: 

•  
  Good to Have 

• Hands-on experience in Python scripting. 

• Experience with automation and REST API integrations. 

• Knowledge of cloud platforms such as AWS, Azure, or GCP. 

• Splunk certifications are an added advantage. 

Years of experience required: 

5 to 9 years 

Education qualification: 

BE/B.Tech/MBA/MCA