SeniorAdministrator

Role Summary

The Event Management Engineer will be responsible for implementing and managing enterprise Event Management and AIOps capabilities using Splunk ITSI. The role will focus on consolidating events from multiple monitoring platforms, reducing alert noise, performing event correlation, configuring service health and KPIs, and enabling proactive identification of infrastructure and application issues. The engineer will work closely with Infrastructure, Application, Network, Cloud, Security, Observability, Automation, and ITSM teams to improve operational visibility and accelerate incident detection and resolution.

Key Responsibilities

1. Splunk ITSI Administration & Engineering: Configure, administer, maintain, and optimize Splunk ITSI. Build and manage Services, KPIs, Service Trees, Glass Tables, Entity Rules, Thresholds, and Health Scores. Configure and manage Episode Review and event aggregation policies. Develop Notable Event Aggregation Policies (NEAPs) to intelligently group related alerts. Troubleshoot ITSI data ingestion, KPI calculation, entity mapping, and service-health issues.
2. Enterprise Event Management: Integrate events and alerts from infrastructure, application, network, cloud, security, and monitoring platforms. Normalize and enrich events with operational information such as CI, application, environment, support group, severity, and business service. Design event correlation, deduplication, suppression, and aggregation rules.
3. Splunk Engineering: Develop and optimize SPL searches, dashboards, alerts, reports, macros, lookups, and data models. Configure data onboarding using Universal Forwarders, Heavy Forwarders, HEC, APIs, syslog, and other integration methods.
4. Monitoring & Observability Integration: Integrate Splunk ITSI with enterprise monitoring and observability platforms such as Microsoft Azure Monitor, AWS CloudWatch, Dynatrace, AppDynamics, SolarWinds SCOM, VMware monitoring solutions, Network monitoring platforms, Database and middleware monitoring tools.
5. ITSM Integration & Automation: Integrate Splunk ITSI with ServiceNow or equivalent ITSM platforms. Enable automated incident creation from qualified events/episodes.
6. Governance & Continuous Improvement: Define and maintain event-management standards, naming conventions, severity models, thresholds, and operational procedures.

Must Have Skill

Bash, Python, Splunk

Certifications – Preferred

• Splunk Core Certified Power User
• Splunk Enterprise Certified Admin
• Splunk ITSI-related training/certification

IT Certifications (Preferred)

• Azure / AWS certifications