IT Lead Specialist - Enterprise Infrastructure Intelligence / Splunk

Serve as the Splunk specialist responsible for governing and continuously improving enterprise log analytics, event correlation, operational intelligence, and observability data used by EII. 

• →Administer, secure, optimize, and govern the Splunk platform and supporting infrastructure.
• →Define standards for data onboarding, ingestion, parsing, normalization, indexing, retention, tagging, access,  and ownership. 
• →Collect and correlate logs, metrics, events, and telemetry across infrastructure, applications, cloud, network,  security, and business services. 
• →Build dashboards, service-health views, alerts, reports, scorecards, and operational intelligence use cases. 
• →Integrate Splunk with SolarWinds, ThousandEyes, ServiceNow, the CMDB, cloud-native tools, security  platforms, automation, and the EII analytical plane. 
• →Support incident response, major outage investigations, problem management, root-cause analysis, anomaly  detection, and recurring-pattern analysis. 
• →Maintain platform resilience, upgrades, capacity, licensing, security, auditability, and lifecycle plans. 

• Splunk platform architecture and standards 
• Operational intelligence dashboards and service-health views 
• Curated log, event, metric, and observability datasets 
• Event-correlation, anomaly, and recurring-pattern reports 
• Telemetry coverage, quality, and retention scorecards 
• Incident and root-cause evidence packs 
• Platform health, capacity, licensing, and lifecycle plans 

• Demonstrated experience administering and supporting Splunk Enterprise in a large, distributed environment.
• Strong SPL skills and experience with data inputs, forwarders, indexes, source types, parsing, field extraction,  search, alerts, and dashboards. 
• Working knowledge of Windows, Linux, networking, infrastructure, cloud, databases, logs, metrics, and event  data. 
• Experience with platform security, role-based access, retention, capacity planning, upgrades, troubleshooting,  and data-quality controls.
• Ability to support incident investigations and communicate technical findings to operational and leadership  stakeholders. 

• Splunk IT Service Intelligence, Splunk Enterprise Security, Splunk Observability Cloud, and Splunk SOAR. 
• OpenTelemetry, REST APIs, Python, PowerShell, SQL, automation, and data-pipeline integration. 
• ServiceNow, CMDB, SolarWinds, ThousandEyes, cloud-native platforms, and security-tool integrations. 
• Service mapping, event correlation, machine learning, AIOps, anomaly detection, forecasting, and executive dashboard design. 

Do others describe you as being a down-to-earth achiever? Someone who thinks outside the box and always strives to do more than what is required? Someone who sees the bigger picture? You sound brilliant to work with!

We are committed to providing equal opportunities to all applicants. If you require accommodation due to a disability, you will have an opportunity to notify us when scheduling your interview.

We are an equal opportunity employer and encourage applications from all qualified individuals. Our ability to work as one team across Canada, the United States, and the Caribbean is foundational to our success. We show up as our authentic selves each day and create space for one another’s unique contributions.

We respect the diverse cultures, traditions, and perspectives of Indigenous Peoples and seek to achieve equitable partnerships and opportunities with Indigenous communities.

Candidates must be legally eligible to work in the country in which they applied. Regrettably, we are unable to sponsor employment visas at this time.

Final candidates will be required to undergo a confidential pre-employment background check, including but not limited to educational, criminal, credit, drug and alcohol, and/or fitness for duty testing.

#LI-AD1