About the role
As a Senior Splunk ITSI Engineer, you will make an impact by building and maintaining the observability infrastructure that keeps IT operations resilient and performant at scale. You will own the design, implementation, and optimization of ITSI service models, monitoring solutions, and automation workflows that directly impact service health and incident response for a global enterprise client operating in a hybrid environment. This is a hands-on technical role for someone who thrives on solving complex monitoring challenges and wants to see their work deliver measurable improvements in operational resilience. You will be a valued member of the Cloud Infrastructure and Security team, working closely with infrastructure, application, and security stakeholders.
In this role, you will
• Design and build robust Splunk ITSI-based observability solutions, including modular service models, glass tables, health scores, and KPIs that provide unified visibility across infrastructure, applications, and services
• Implement security best practices across the Splunk environment, including user authentication, access controls, and data encryption, to ensure platform integrity and compliance
• Configure and optimize ITSI correlation searches, notable event aggregation, and alerting policies to reduce noise, improve incident detection accuracy, and support efficient triage and response
• Apply advanced analytics techniques including anomaly detection and predictive analytics within ITSI to proactively identify and mitigate service issues before they impact operations
• Automate onboarding of new data sources by designing reusable ingestion patterns, field extractions, and data normalization rules to ensure CIM compliance, while developing reusable knowledge objects such as macros, lookups, and evaluation expressions
• Develop custom scripts and automation workflows to streamline Splunk administration tasks and support continuous improvement across the platform
• Troubleshoot and resolve Splunk and ITSI configuration, performance, and data ingestion issues at an expert level, proactively monitoring infrastructure health and providing recommendations for improvement
• Collaborate with infrastructure, application, and security teams to translate monitoring requirements into ITSI use cases and deliver solutions aligned with organizational objectives
• Partner with stakeholders to define success metrics, track adoption of ITSI features, and report on measurable improvements in service reliability, documenting solution designs and operational procedures for ongoing support
Work model
We strive to provide flexibility wherever possible. Based on this role’s business requirements, this is a remote position open to qualified applicants in Louisville, KY. Regardless of your working arrangement, we are here to support a healthy work-life balance though our various wellbeing programs.
The working arrangements for this role are accurate as of the date of posting. This may change based on the project you’re engaged in, as well as business and client requirements. Rest assured; we will always be clear about role expectations.
What you need to have to be considered
• 5+ years of professional experience in infrastructure monitoring or observability, with a primary focus on implementing solutions using Splunk ITSI in enterprise environments
• Expert-level knowledge in troubleshooting and resolving Splunk infrastructure issues, including configuration, performance, and data ingestion problems
• Expert-level experience writing Splunk Search Processing Language (SPL) for complex search queries, correlations, CIM compliance, and Datamodel management
• Practical experience designing ITSI service models, glass tables, and health scores that align technical metrics with business objectives and reliability targets
• Strong understanding of IT operations including networking, systems administration, and security, with experience implementing platform security controls
• Proven ability to onboard diverse machine data sets into Splunk, applying appropriate parsing, normalization, and enrichment techniques to ensure CIM compliance
• Experience integrating Splunk or ITSI outputs with incident management tools, automation platforms, or collaboration solutions to streamline response workflows
• Excellent analytical and problem-solving skills, with effective communication abilities across both technical and non-technical stakeholders
• 5+ years of hands-on experience with Splunk ITSI in an enterprise environment
These will help you stand out
• Preferred Splunk Certified Admin certification
• Bachelor’s degree in Computer Science, Information Technology, or a related field
• Experience with scripting languages for automation, data manipulation, and custom workflow development
• Familiarity with CIM compliance, Datamodel management, and integrating Splunk with diverse data sources
• Background in IT operations or managed services environments
We’re excited to meet people who share our mission and can make an impact in a variety of ways. Don’t hesitate to apply, even if you only meet the minimum requirements listed.
Think about your transferable experiences and unique skills that make you stand out as someone who can bring new and exciting things to this role.
Salary and Other Compensation:
Applications will be accepted until May 29, 2026
The annual salary for this position is between $91,000 - $105,000 depending on experience and other qualifications of the successful candidate.
This position is also eligible for Cognizant’s discretionary annual incentive program, based on performance and subject to the terms of Cognizant’s applicable plans.
Benefits: Cognizant offers the following benefits for this position, subject to applicable eligibility requirements:
·Medical/Dental/Vision/Life Insurance
· Paid holidays plus Paid Time Off
· 401(k) plan and contributions
· Long-term/Short-term Disability
· Paid Parental Leave
· Employee Stock Purchase Plan
Disclaimer: The salary, other compensation, and benefits information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.
Please note, this role is not able to offer visa transfer or sponsorship now or in the future.
La communauté Cognizant :
Nous sommes une équipe de professionnels dont les membres s'apprécient et se soutiennent mutuellement. Nos collaborateurs sont les garants d'un lieu de travail dynamique, collaboratif et inclusif où chacun peut s'épanouir.
- Cognizant est une communauté mondiale qui compte plus de 300 000+ collaborateurs dans le monde entier.
- Nous ne nous contentons pas de rêver de façons idéales, nous apportons des améliorations concrêtes
- Nous prenons soin de nos collaborateurs, de nos clients, de notre entreprise, de nos communautés et du climat, en faisant ce qui est juste.
- Nous favorisons un environnement innovant où vous pouvez construire le plan de carrière qui vous convient.
À propos de nous :
Cognizant (NASDAQ : CTSH) est un concepteur d’IA et un fournisseur de services technologiques. Avec notre gamme de solutions IA full-stack, nous accompagnons nos clients au carrefour de l’investissement dans l’IA et de la valeur ajoutée. Notre grande expertise sectorielle, des processus et de l’ingénierie nous permet de convertir le contexte propre à chaque entreprise en systèmes technologiques amplificateurs du potentiel humain, générateurs de résultats tangibles et garants de l’avantage des acteurs internationaux dans un monde en constante évolution. Découvrez notre méthode sur www.cognizant.com ou suivez @cognizant.
Cognizant est un employeur soucieux de l'égalité des chances entre candidats. Votre candidature sera étudiée indépendamment de votre race, couleur, sexe, religion, croyances, orientation sexuelle, identité de genre, origine, handicap, informations génétiques, grossesse, statut d'ancien militaire ou de toute autre critère jugé discriminant par les lois européennes ou françaises.
Vous êtes porteur d'un handicap, vous pouvez-nous contacter par courriel [email protected] si vous souhaitez préciser les aménagements nécessaires pour le poste ou les entretiens à venir.
Mentions légales :
Les informations relatives à la rémunération du poste à pourvoir dépendent de la date de publication de l’offre de poste. Cognizant se réserve le droit de modifier ces informations à tout moment, sous réserve des lois applicables.
Les candidats peuvent être invités à participer à des entretiens en face à face ou par vidéoconférence. En outre, les candidats peuvent être amenés à présenter une carte d'identité valide lors de chaque entretien.