Principal Technical Lead - Splunk IT Service Intelligence (ITSI)

Location: Bengaluru / Chennai / Hyderabad (Hybrid)

Experience: 7+ Years

About the Role:

We are seeking an experienced Principal Technical Lead - Splunk ITSI to provide technical leadership for enterprise-scale Splunk IT Service Intelligence (ITSI) environments. The role involves leading critical escalations, driving platform reliability, optimizing service health monitoring, and collaborating with global teams to deliver operational excellence.

Key Responsibilities:

- Lead the resolution of critical Splunk ITSI incidents and escalations with end-to-end ownership.

- Troubleshoot KPI failures, service health degradation, and event correlation issues.

- Conduct advanced Root Cause Analysis (RCA) using logs, diagnostic data, and performance metrics.

- Design, optimize, and maintain ITSI service models, KPIs, dashboards, and correlation searches.

- Improve platform performance, scalability, and overall reliability of Splunk ITSI environments.

- Collaborate with enterprise customers, engineering, and support teams to resolve complex technical issues.

- Validate product updates, patches, and enhancements to ensure operational readiness.

- Mentor engineers, drive technical enablement initiatives, and promote knowledge sharing across teams.

- Act as the primary technical escalation point for customer-impacting incidents and drive continuous improvement initiatives.

Required Skills & Experience:

- 7+ years of experience in Splunk administration, observability, or enterprise monitoring platforms.

- Strong hands-on experience with:

1. Splunk IT Service Intelligence (ITSI)

2. Splunk Enterprise Administration

3. KPI Management and Service Health Monitoring

4. Service Modeling and Event Correlation

5. Root Cause Analysis (RCA)

6. Dashboard Performance Optimization

7. Incident and Escalation Management

- Experience with cloud platforms such as AWS, Azure, or GCP.

- Hands-on experience with Python and/or Shell Scripting.

- Strong understanding of enterprise monitoring, observability, and operational support processes.

Desired Candidate Profile:

- Strong analytical, troubleshooting, and problem-solving capabilities.

- Proven experience handling critical production incidents and complex enterprise environments.

- Excellent communication, stakeholder management, and customer engagement skills.

- Ability to lead technical discussions and influence globally distributed teams.

- Self-driven individual with a strong focus on reliability, ownership, and continuous improvement.

Preferred Certifications:

- Splunk Certified Admin

- Splunk ITSI Certified Admin (Legacy)

- AWS, Azure, or GCP Certifications

Leadership Expectations:

- Serve as the primary escalation point for customer-impacting incidents.

- Drive platform reliability and operational excellence initiatives.

- Influence strategic improvements across global teams.

- Foster a culture of technical excellence, ownership, and continuous learning.