Splunk Developer
hace 8 días
Edinburgh
Job Description Splunk Developer - Technical Lead (ITSI) Role Summary We are seeking an experienced Splunk Developer - Technical Lead with strong hands-on expertise in Splunk Enterprise, IT Service Intelligence (ITSI), and Observability. The role requires deep technical knowledge combined with design leadership, stakeholder engagement, and production responsibility across complex enterprise platforms. The candidate will lead Splunk solution design, mentor junior developers, and work closely with operations, SRE, and application teams to deliver scalable monitoring, service health, and analytics solutions. Key Responsibilities Technical Leadership • Act as Technical Lead for Splunk implementations across monitoring, observability, and service intelligence use cases., • Own end-to-end Splunk solution design including data onboarding, data models, dashboards, alerts, and ITSI objects., • Review and govern Splunk development standards, SPL performance, and configuration best practices., • Design and implement Splunk ITSI components including:, • Services & service hierarchies, • KPIs & thresholds, • Glass Tables, • Episode review and correlation search tuning, • Build service-centric monitoring aligned to business and application landscapes., • Lead onboarding of diverse data sources:, • Application logs, infrastructure metrics, APM data, cloud logs, and security events, • Design and optimise:, • Indexing strategy, • Source types and field extractions, • Data models and CIM compliance, • Develop advanced dashboards using:, • Splunk Dashboard Studio/Classic dashboards, • Design meaningful alerts using:, • Correlation searches, • Risk-based alerting principles, • Integrate Splunk with enterprise observability tools (APM, infrastructure monitoring, cloud platforms)., • Support production incidents using Splunk, driving root-cause analysis and post-incident reviews., • Collaborate with:, • SRE/Ops teams, • Application & platform teams, • Service Management & ITIL functions, • Translate monitoring requirements into scalable technical solutions. Splunk Expertise • Strong hands-on experience with Splunk Enterprise, • Proven experience with Splunk ITSI (mandatory):, • KPI design and service modelling, • Glass Tables, • Excellent command of SPL (Search Processing Language), • Strong understanding of:, • Data models & CIM, • Index management and performance tuning, • Experience integrating Splunk with:, • Application, infrastructure, and cloud platforms, • Experience working as Technical Lead/Lead Developer, • Ability to own solution design and guide teams end-to-end, • Experience working in large-scale enterprise environments (Banking/Financial Services preferred), • Exposure to incident management, operational resilience, and ITIL processes, • Splunk Observability (APM, Infrastructure Monitoring) exposure, • CI/CD integration for Splunk content (Git, Jenkins, DevOps pipelines), • Cloud platforms (AWS/Azure/GCP) log and metric ingestion, • Splunk certifications (Power User, Admin, ITSI), • Strong communication and stakeholder-handling skills, • Ability to explain complex technical concepts to non-technical audiences, • Ownership mindset and delivery focus, • Senior Developer/Technical Lead (L3/L4 equivalent)