Expert Splunk / Infrastructure & Observability Senior

ABGi Technology is recruiting on behalf of its client, a large industrial group in the energy sector, for its future Senior Splunk / Infrastructure & Observability Expert, based in Lyon.

🔎 YOUR MISSIONS

As part of the operational maintenance and modernisation of its industrial IT infrastructure, our client wishes to strengthen its teams with an experienced Splunk Expert, specialised in the centralisation, analysis and exploitation of technical logs.

You will work in a critical industrial environment, where availability, security, reliability and traceability of information systems are major challenges.

Your role will be to ensure the deployment, administration, evolution and operational maintenance (MCO) of Splunk platforms, while contributing to improving observability and the analysis of technical events.

You will work alongside the infrastructure, operations, monitoring and support teams to ensure the reliability of logging solutions across Production and Non-Production environments.

The missions required of you:

• Ensure the deployment, installation, configuration and administration of Splunk platforms;

• Take part in the design and evolution of technical architectures for log centralisation and exploitation;

• Ensure operational maintenance (MCO) and the availability of logging platforms;

• Administer, maintain and evolve Splunk and Rsyslog solutions;

• Implement and optimise the mechanisms for collecting, centralising and processing logs from the various infrastructures;

• Configure and maintain the forwarding flows for system, application and technical logs;

• Analyse and exploit logs to help identify anomalies, incidents and malfunctions;

• Take part in improving observability, diagnostics and traceability of infrastructures;

• Identify and resolve complex technical incidents affecting Splunk platforms;

• Provide Level 3 (N3) technical support to Level 2 operations teams;

• Carry out corrective, preventive and evolutive maintenance operations;

• Contribute to securing and hardening the logging platforms and flows;

• Develop and maintain Python and Bash scripts to automate recurring technical operations;

• Use Ansible to automate configurations, deployments and administration operations;

• Take part in the testing, qualification and validation phases of technical evolutions;

• Write and maintain Technical Architecture Documents (DAT), operating procedures, test plans and technical guides;

• Document configurations, architectures and procedures for diagnosing and resolving incidents;

• Take part in technical workshops and exchanges with the various infrastructure and operations teams;

• Track interventions and keep activity management tools up to date, notably Jira and ServiceNow;

• Take part in Agile SAFe ceremonies held as part of the activities;

• Be a source of proposals for continuous improvement of tools, performance and operational practices.

🎯 OUR REQUIREMENTS

Required skills and experience:

• Significant experience in the administration and operation of Splunk platforms in a production environment;

• In-depth expertise in Splunk: architecture, installation, configuration, administration and API;

• Strong command of log collection, centralisation, processing, search and analysis mechanisms;

• Good knowledge of infrastructure architectures and observability challenges;

• Experience in deploying, maintaining and evolving logging platforms;

• Very good command of Linux environments, notably Red Hat Enterprise Linux (RHEL);

• Command of Python and Bash scripting for automating administration and operations tasks;

• Hands-on experience with Ansible for automating configurations and deployments;

• Ability to diagnose and resolve complex Level 3 incidents;

• Experience in operational maintenance (MCO) of critical technical platforms;

• Ability to produce clear, structured and usable technical documentation;

• Experience of IT in an industrial environment;

• Good command of technical English, both written and spoken.

The following skills are considered real assets:

• Knowledge and practical use of Rsyslog for log collection and forwarding;

• Experience in designing and optimising centralised logging architectures;

• Knowledge of volume, performance and availability issues of Splunk platforms;

• Experience in setting up dashboards, advanced searches and alerting mechanisms in Splunk;

• Good understanding of cybersecurity, traceability and analysis of system events challenges;

• Knowledge of industrial infrastructure architectures and the constraints specific to critical environments;

• Familiarity with incident and change management tools, notably Jira and ServiceNow;

• Experience of working collaboratively with infrastructure, operations, monitoring and security teams.

Experience within a demanding industrial environment is particularly sought after, notably in the energy, nuclear, critical infrastructure, transport or heavy industry sectors.

👤 PROFILE SOUGHT

Holding a Bac+3 to Bac+5 qualification in computing, systems and networks, IT infrastructures or an equivalent field, you have proven experience at a confirmed to senior level in administering technical platforms, with in-depth operational expertise in Splunk.

You are able to work autonomously across the entire lifecycle of a logging platform: architecture, deployment, configuration, operation, maintenance, diagnostics and continuous improvement.

You have a solid grounding in Linux infrastructures and master the scripting and automation tools needed to operate complex technical environments.

You are rigorous, organised, methodical and autonomous, with a real capacity for analysis and resolving technical problems.

Your ability to communicate effectively, both orally and in writing, and to produce quality technical documentation will be essential in this assignment.

You enjoy teamwork and know how to collaborate with a varied range of contacts while showing initiative and proactivity.

Additional information:

• Location: Lyon

• Remote working: 2 days per week

• Expected start: 1 January 2027

• Expected duration of the assignment: until 31 December 2029

• Environment: critical industrial IT infrastructures, production and non-production

#LI-ABGI