Lead Observability Engineer

Requirements

• Splunk Certified Admin / Architect
• Proficient in scripting languages (Python, Bash, etc.) and automation tools (Puppet/Ansible/Terraform/Jenkins)
• Experience working within a SAFe environment, including participation in PI (Program Increment) Planning, Agile Release Trains (ARTs), and cross-functional collaboration across teams.
• Proficient in managing data inputs and universal forwarders
• Proficient in setting up users, roles, and authentication protocols to ensure secure access control
• Extensive knowledge of Splunk configuration files and their role in customizing deployments
• Experience in installation and management of apps within Splunk Cloud to extend functionality
• Skilled in monitoring, problem isolation, and system health checks to maintain performance
• Deep understanding of cloud platforms like Azure and GCP
• Demonstrated expertise in sizing, planning, and deploying distributed Splunk environments
• Familiarity with indexer and search head clustering
• Demonstrated expertise in onboarding diverse data sources and optimizing parsing for performance and scalability
• Experience integrating Splunk with other enterprise systems (CMDB, ticket tools, etc.)
• Creating intuitive, actionable dashboards according to best practices for Splunk performance