Principal Infrastructure Engineer

Position Title: Principal Infrastructure Engineer

Career Level: P4

Job Category: Assistant Vice President

Role Type: Hybrid

Job Location: Bangalore

Seeking expert Splunk Admins for a critical enterprise-wide observability and monitoring initiative. This role is essential in designing, building, and implementing standardized data onboarding pipelines and configurations to bring applications into Splunk Enterprise and Splunk Enterprise Security platforms. Success demands both technical depth and the ability to work at a rapid pace while maintaining high quality and consistency.

Design and implement standardized data onboarding procedures and configurations for applications; establish repeatable patterns and templates

Conduct technical onboarding of applications into Splunk Cloud: configure data inputs, create parsing rules, establish field extractions, and build data models

Map application data and security events to Splunk Common Information Model (CIM); identify and document relevant SIEM use cases

Build and optimize data models, lookups, and knowledge objects to support reporting, alerting, alerting rule creation, and compliance requirements

Design and implement automated onboarding pipelines using Git-based configuration management, Ansible playbooks, and CI/CD workflows to reduce manual effort and improve consistency

Establish and enforce standardized tagging conventions, naming standards, and data organization principles across all onboarded applications

Collaborate with Business Analysts to translate requirements into technical specifications; support requirements clarification and feasibility assessment

Work alongside Splunk Data Admins to execute onboarding at scale; establish code review and peer collaboration practices to maintain quality

Provide consultation to Splunk users and stakeholder teams on best practices, use cases, and guidance for creating and maintaining knowledge objects

Deliver training and knowledge-sharing sessions to Enterprise Monitoring Team and partner IT teams on standardized onboarding procedures and platform capabilities

Integrate Splunk with complementary monitoring and infrastructure platforms (Dynatrace, SolarWinds) to ensure cohesive observability workflows

Serve as primary technical point of contact for complex Splunk platform issues during the engagement period; support incident response as needed in collaboration with client's operations team

Monitor Splunk platform health and performance; proactively identify and resolve bottlenecks, optimization opportunities, and infrastructure constraints

Correlate and reconcile disparate events and data sources from multiple monitoring platforms to ensure consistent, reliable alerting and reporting

Troubleshoot and resolve complex data integration challenges; identify data quality issues, reconciliation gaps, and root causes

Document technical architecture, configuration decisions, onboarding procedures, and lessons learned to enable knowledge transfer and future maintenance

Participate in ongoing optimization and performance tuning as volume and complexity increase throughout the engagement

Reports to: Associate Director

Partners: Cross-functional teams across geographies ( US team)

We are committed to providing an inclusive and accessible hiring process. If you require accommodations at any stage (e.g. application, interviews, onboarding) please let us know, and we will work with you to ensure a seamless experience.

FC Global Services India LLP (First Citizens India) is an Equal Employment Opportunity Employer. We are committed to fostering an inclusive and accessible environment and prohibit all forms of discrimination on the basis of gender, religion, caste, disability, sexual orientation, economic status or any other characteristics protected by the law. We strive to foster a safe and respectful environment in which all individuals are treated with respect and dignity. Our EEO policy ensures fairness throughout the employee life cycle.