Observability Engineer ITOps and SecOps

Project overview

Job Title: Observability Engineer ITOps and SecOps

Reference: 26-04-7682-001

Responsibilities

Education:

Primary Skills:

Important Skills:

• Deploy Splunk collection probes: configure and install agents (Forwarders) on various servers and equipment to capture relevant log and metric flows.
• Develop Splunk operations: translate the functional referent's operational requirements into complex SPL queries and design interactive dashboards with high added value.
• Build service observability: connect and correlate data from supervision tools in Splunk to provide end-to-end visibility on on-premise and cloud infrastructures.
• Optimize alerting: model and refine alert thresholds to eliminate false positives and ensure the relevance of notifications sent to Ops, R&D, and Security teams.
• Guide and add value: establish logging standards (e.g., JSON formats) with development teams and lead introductory workshops on SPL.
• Manage central technical needs: formally express architecture or storage evolution needs to the team responsible for Splunk's technical administration.
• HES diploma, Bachelor's degree in IT, or equivalent.
• 3 to 5 years of experience or more in the skills below.
• Splunk analytical expertise: excellent command of the Splunk SPL query language (essential), writing advanced correlation calculations, creating macros, and modeling business data.
• Splunk collection and probes: mastery of the deployment, configuration, and setup of Splunk collection agents (Universal Forwarders, Heavy Forwarders, Technical Add-ons).
• Observability concepts and tools: proven ability to consolidate multi-source alerts (infrastructures and applications) to design global and dynamic control cockpits.
• Traditional supervision foundations: perfect mastery of classic monitoring mechanisms (performance thresholds, system counters, availability indicators) and at least one market supervision tool (e.g., Centreon, Zabbix, Nagios, PRTG, Datadog, or equivalent).
• Modern telemetry culture: good understanding of observability pillars (logs, metrics, traces) and openness to market standards like OpenTelemetry (OTel).
• IT operations service culture: good knowledge of the functioning, needs, and constraints of IT operations and ITIL methods.
• Application understanding: general knowledge of modern architecture functioning (APIs, microservices) and containers (Docker, Kubernetes).

Nice to have

Required Qualities:

• Hypervision and reporting ecosystem: knowledge of OpsBridge solutions (event consolidation) and/or Power BI (reporting and analytical control).
• ITSM processes and tools: knowledge and practice of IT service management tools for articulation between hypervision and incident management.
• Third-party visualization: knowledge of Grafana, Perses, or Prometheus for cross-referencing certain metrics.
• Automation: scripting basics (Python, Bash) or deployment tools (Ansible) for industrializing the deployment of collection probes.
• Splunk certifications: a user-oriented or basic administration certification (e.g., Splunk Core Certified Power User or Advanced Power User) is an asset.
• Rigor, responsibility, and analytical skills: methodological precision, scientific rigor for handling large volumes of technical data, and a sense of responsibility towards critical operated services.
• Solution-oriented, composure, and affinity for production: pragmatic problem-solving mindset, calmness during critical incidents, and a strong taste for the IT production world.
• Communication, listening, and teamwork: interpersonal skills, listening skills, and natural ability to collaborate effectively with various stakeholders.
• Knowledge sharing and adaptability: strong desire for transmission, pedagogy, and technical skill transfer, with an open attitude towards changes and technological evolutions.

Project details

Geneva

Desired Start Date: February 2027

100%

Compensation: from 125,000 CHF / year

Job Description and Context:

We are looking for a confirmed profile (3 to 5 years of experience) observability engineer for a client, a public administration in Geneva, to strengthen its operations department. This department manages IT and publishing productions and oversees an operational center responsible for continuous monitoring of batch production and the status of several hundred applications.

Working alongside the Splunk functional referent, the selected candidate will translate business and technical needs into concrete solutions (dashboards, alerts, data models) for IT supervision and operational cybersecurity, from deployment of collectors to the creation of dynamic hypervision cockpits. Long-term mission (up to 5 years).

• Start: flexible
• Location: Geneva, Geneva, CH
• Languages: French