Splunk ITSI Engineer

• Design, develop, and deploy dashboards, services, glass tables, and KPIs using Splunk ITSI.
• Implement and optimize service decomposition, health score calculations, and correlation searches.
• Collaborate with IT and business stakeholders to define service models and monitoring use cases.
• Integrate Splunk ITSI with other ITOM/ITSM tools such as ServiceNow, Dynatrace, AppDynamics, etc.
• Develop Notable Events, Episodes, and alerts for proactive incident management.
• Perform data onboarding and normalization for logs, metrics, and events.
• Analyze and optimize performance of ITSI environments and underlying Splunk architecture.
• Provide documentation, training, and support to operations and application teams.
• Ensure compliance with data governance and security policies.

Required Qualifications:

• Bachelor’s degree in Computer Science, Information Technology, or related field.
• 3+ years of experience with Splunk, including 1+ years with Splunk ITSI.
• Strong understanding of Splunk SPL, data models, macros, and correlation searches.
• Experience with IT operations monitoring, incident management, and service modeling.
• Proficiency in integrating ITSI with external tools and APIs.
• Familiarity with ITIL practices and service management concepts.

Preferred Skills:

• Splunk certifications (e.g., Splunk Core Certified Power User, Splunk ITSI Certified Admin).
• Experience with Splunk Enterprise Security (ES), Observability Suite, or UBA.
• Scripting knowledge (e.g., Python, Bash, PowerShell).
• Experience with cloud-based Splunk deployments (AWS, GCP, Azure).
• Familiarity with container environments (Docker, Kubernetes) and microservices monitoring