Splunk Engineer

Job Description: Splunk Engineer At Lilly, we unite caring with discovery to make life better for people around the world. We are a global healthcare leader headquartered in Indianapolis, Indiana. Our 35,000 employees around the world work to discover and bring life-changing medicines to those who need them, improve the understanding and management of disease, and give back to our communities through philanthropy and volunteerism. We give our best effort to our work, and we put people first. We’re looking for people who are determined to make life better for people around the world. Position: Splunk Engineer Requirements: 4 - 5 years of Splunk experience. 3 - 5 years of Splunk IT Service Intelligence (ITSI) development experience (mandatory). 4 - 8 years of overall industry experience as a technology practitioner. Successful enterprise-level implementation of Splunk Cloud is a plus. Experience in requirements gathering, documenting requirements, requirement analysis, product testing, etc. Qualifications: Prior experience with Splunk enterprise cloud support for large enterprise environments (> 5000 servers). Experience developing Splunk ITSI glass tables, service trees, correlation searches, KPIs, and notable event aggregation policies. Splunk Certification (or equivalent experience) – Preferred. Experience with enterprise-scale operations and maintenance environments. Minimum 2 years of experience with rule and advanced logic creation within Splunk. Experience with cloud runtime services such as AWS EC2, Lambda, CloudWatch, Azure compute, and functions. Ability to interface well with end users. Strong communication, written, and verbal skills. Primary Responsibilities: Engineer, configure, administer, and support Lilly’s enterprise observability solution, including Splunk Cloud, Splunk ITSI, and Splunk Infrastructure Monitoring Enterprise Edition. Develop ITSI glass tables, service trees, Entity design, KPIs, and correlation searches. Develop front-end searches, dashboards, and reports using Splunk’s SPL for advanced threat detection. Perform root-cause analysis post-implementation and implement solutions. Create low-level design artifacts independently and high-level design artifacts with guidance. Expand use cases and onboard new data sources into Splunk. Perform Splunk health checks and recommend system/platform optimizations. Transfer knowledge to Ops Analysts and IT Engineers regarding Splunk usage and performance. Collaborate with risk, compliance, and cybersecurity teams to meet log management and SIEM policies. Enhance ingestion, onboarding, and management processes through automation and architecture improvements. Automate and improve processes for log management. Design and implement dashboards and reports per business/user requirements. Work with user areas to enhance log and SIEM maturity. Maintain 24x7 system uptime. Continuously seek and implement opportunities to improve performance, availability, and stability.

Location: Mexico, MX

Posted Date: 7/3/2025