Senior Observability Engineer

• Design, implement, and manage data ingestion pipelines from diverse sources into Splunk Cloud.
• Ensure data quality, efficiency, and compliance across ingestion workflows.
• Implement and manage Open Telemetry for standardized collection of traces, metrics, and logs.

Develop and maintain ITSI components including:

• Service Tree Design : Map IT infrastructure and applications into logical service trees reflecting business criticality.
• KPI Creation : Define and refine KPIs to measure service health and performance.
• Glass Table Development : Build intuitive dashboards for real-time operational insights.
• Anomaly Detection : Configure machine learning-based anomaly detection and intelligent thresholds.

• Tune Splunk Cloud and ITSI for optimal performance, including search execution and dashboard responsiveness.
• Implement Logs as a Code (LaaC) practices for managing logging configurations and parsing rules in a version-controlled, automated manner.

• Provide expert-level support for Splunk and ITSI-related issues, including data discrepancies and performance bottlenecks.
• Collaborate with SREs, developers, and operations teams to translate observability needs into actionable solutions.

• Work closely with application and infrastructure teams to align observability strategies with business goals.
• Maintain comprehensive documentation and promote observability best practices across the organization.

• bachelors degree in Computer Science, Information Technology, or a related field, or equivalent practical experience.
• 3 6 years of hands-on experience with Splunk Cloud and/or Splunk ITSI in enterprise environments.
• Strong proficiency in Splunk SPL, including advanced queries, macros, and data model acceleration.
• Experience with Open Telemetry instrumentation and observability pipelines.
• Familiarity with scripting languages (eg, Python, Bash) for automation and API integrations.
• Understanding of cloud platforms (AWS, Azure, GCP) and container technologies (Docker, Kubernetes) is a plus.

• Splunk Core Certified User or Administrator
• Splunk ITSI Certified Admin
• Splunk Enterprise Certified Architect (bonus)