IT Lead Specialist - Enterprise Infrastructure Intelligence / Splunk

Parkland Corporation; Calgary; On-site; CAD 90,000 - 120,000; Full time

Job summary

Sunoco LP in Canada is seeking a Senior Splunk Specialist to govern and continuously improve enterprise log analytics, event correlation, and observability data used by EII.

You will administer and secure the Splunk platform across Windows, Linux, cloud and on-premise environments, define data onboarding standards, build dashboards and alerts, and support incident response and root-cause analysis.

Qualifications

• Demonstrated experience administering and supporting Splunk Enterprise in a large, distributed environment.
• Strong SPL skills including inputs, forwarders, indexes, source types, parsing, and dashboards.
• Experience with platform security, RBAC, retention, upgrades, and data-quality controls.
• Ability to communicate technical findings to operations and leadership stakeholders.
• Familiarity with ServiceNow, CMDB, and cloud-native integrations is a plus.

Responsibilities

• Administer, secure, optimize, and govern the Splunk platform and supporting infrastructure.
• Define standards for data onboarding, ingestion, parsing, normalization, indexing, retention, tagging, access, and ownership.
• Collect and correlate logs, metrics, events, and telemetry across infrastructure, applications, cloud, network, security, and business services.
• Build dashboards, service-health views, alerts, reports, scorecards, and operational intelligence use cases.
• Integrate Splunk with SolarWinds, ThousandEyes, ServiceNow, the CMDB, and cloud-native tools.
• Support incident response, major outage investigations, problem management, root-cause analysis, and anomaly detection.

Skills

Splunk Enterprise

SPL queries

Data analytics

Incident response

Cloud platforms

Tools

ServiceNow

SolarWinds

ThousandEyes

OpenTelemetry

Python

Job description

As of November 1, 2025, Sunoco LP has successfully completed its acquisition of Parkland Corporation. For more information, please visit www.sunocolp.com.

Sunoco LP is a leading energy infrastructure and fuel distribution master limited partnership operating across 32 countries and territories in North America, the Greater Caribbean, and Europe. The Partnership’s midstream operations include an extensive network of approximately 14,000 miles of pipeline and over 160 terminals. This critical infrastructure complements the Partnership’s fuel distribution operations, which distribute over 15 billion gallons annually to approximately 11,000 Sunoco and partner-branded retail locations, as well as independent dealers and commercial customers.

At Sunoco, we take great pride in what we do and wholeheartedly believe our employees drive success for our company and our customers. We are always looking for the best and brightest talent and are committed to making your job a challenging and rewarding experience.

Competitive Benefits. Meaningful Extras. Unmatched Value.

• A place where you can take your career in the direction you want to grow and go

The Opportunity:

Serve as the Splunk specialist responsible for governing and continuously improving enterprise log analytics, event correlation, operational intelligence, and observability data used by EII.

Responsibilities:

• Administer, secure, optimize, and govern the Splunk platform and supporting infrastructure.
• Define standards for data onboarding, ingestion, parsing, normalization, indexing, retention, tagging, access, and ownership.
• Collect and correlate logs, metrics, events, and telemetry across infrastructure, applications, cloud, network, security, and business services.
• Build dashboards, service-health views, alerts, reports, scorecards, and operational intelligence use cases.
• Integrate Splunk with SolarWinds, ThousandEyes, ServiceNow, the CMDB, cloud-native tools, security platforms, automation, and the EII analytical plane.
• Support incident response, major outage investigations, problem management, root-cause analysis, anomaly detection, and recurring-pattern analysis.
• Maintain platform resilience, upgrades, capacity, licensing, security, auditability, and lifecycle plans.

Principal outputs:

• Splunk platform architecture and standards
• Operational intelligence dashboards and service-health views
• Curated log, event, metric, and observability datasets
• Event-correlation, anomaly, and recurring-pattern reports
• Telemetry coverage, quality, and retention scorecards
• Incident and root-cause evidence packs
• Platform health, capacity, licensing, and lifecycle plans

Requirements:

• Demonstrated experience administering and supporting Splunk Enterprise in a large, distributed environment.
• Strong SPL skills and experience with data inputs, forwarders, indexes, source types, parsing, field extraction, search, alerts, and dashboards.
• Working knowledge of Windows, Linux, networking, infrastructure, cloud, databases, logs, metrics, and event data.
• Experience with platform security, role-based access, retention, capacity planning, upgrades, troubleshooting, and data-quality controls.
• Ability to support incident investigations and communicate technical findings to operational and leadership stakeholders.

Preferred Skills:

• Splunk IT Service Intelligence, Splunk Enterprise Security, Splunk Observability Cloud, and Splunk SOAR.
• OpenTelemetry, REST APIs, Python, PowerShell, SQL, automation, and data-pipeline integration.
• ServiceNow, CMDB, SolarWinds, ThousandEyes, cloud-native platforms, and security-tool integrations.
• Service mapping, event correlation, machine learning, AIOps, anomaly detection, forecasting, and executive dashboard design.

Humble. Hungry. Smart. Does this sound like you?

Do others describe you as being a down-to-earth achiever? Someone who thinks outside the box and always strives to do more than what is required? Someone who sees the bigger picture? You sound brilliant to work with!

We Want You To Shine:

We are committed to providing equal opportunities to all applicants. If you require accommodation due to a disability, you will have an opportunity to notify us when scheduling your interview.

Belonging Matters. Because You Do:

We are an equal opportunity employer and encourage applications from all qualified individuals. Our ability to work as one team across Canada, the United States, and the Caribbean is foundational to our success. We show up as our authentic selves each day and create space for one another’s unique contributions.

We respect the diverse cultures, traditions, and perspectives of Indigenous Peoples and seek to achieve equitable partnerships and opportunities with Indigenous communities.

The Fine Print:

Candidates must be legally eligible to work in the country in which they applied. Regrettably, we are unable to sponsor employment visas at this time.

Final candidates will be required to undergo a confidential pre-employment background check, including but not limited to educational, criminal, credit, drug and alcohol, and/or fitness for duty testing.

#LI-AD1