Splunk ITSI Engineer

Salary: $120,000 - 120,000 per year Requirements: We require an active Secret clearance. We require a current, active IAT Level II certification such as Security+ CE, CySA+, CCNA-Security, GICSP, GSEC, CND, or SSCP. We require 6+ years of experience with enterprise monitoring tools and architecture. We need proven, hands-on experience with Splunk ITSI, including service and KPI modeling, glass tables, service trees, and notable events. We require practical experience with Splunk data ingestion, including data inputs, indexes, forwarders, and pipeline configuration. We need strong command of Splunk core capabilities, including search syntax, data models, and reporting. We require Linux administration experience. We require experience with RMF or a comparable government IT certification and accreditation process. We require a bachelors degree in IT, math, or a related field, or equivalent hands-on experience. We require scripting experience for automation, preferably in Python or PowerShell. We require working knowledge of network protocols, system administration, and security concepts. Preferred qualifications include Splunk Computing Environment certifications such as Splunk Enterprise Certified Admin, ITSI Certified Admin, ES Certified Admin, or Architect. Preferred experience includes Military Health or federal health IT environments. Preferred experience includes familiarity with ServiceNow ITSM (MHSSHD). Preferred experience includes integrating Splunk with external monitoring and service management platforms. Preferred experience includes data analysis and statistical methods. Responsibilities: We design advanced ITSI visualizations and lead discussions on integrating contextual data into notable events. We build and maintain custom ITSI Glass Tables and Service Trees. We onboard new data sources into Splunk in line with best practices and customer requirements. We maintain data ingestion pipelines across application logs, system logs, and network traffic. We configure Splunk data inputs, indexes, and processing pipelines, and troubleshoot data quality issues. We monitor Splunk system health, identify performance bottlenecks, and tune configurations. We manage Splunk capacity planning and resource allocation. We use Splunk Enterprise Security to detect and investigate incidents, and we develop and maintain custom detection rules and correlation searches. We build advanced searches and reporting to highlight anomalies and key trends. We support RMF compliance by monitoring and reporting on key data points. We provide technical training, user documentation, and best-practice guidance to Splunk users across the organization. We partner with cross-functional teams, end users, and senior leadership to turn needs into working monitoring solutions. Technologies: AI Architect Support ITSM Linux Network PowerShell Python Security ServiceNow Splunk More: We are SDV International, hiring a senior Splunk ITSI Engineer to help expand an enhanced enterprise monitoring platform for the Defense Health Agency Infrastructure and Operations Division. This is a hands-on role on our EEMTT team supporting the EITSI program within a large distributed clustered Splunk Enterprise environment that serves as the monitoring intelligence hub for DHA and integrates with ServiceNow and other service management and monitoring systems. We are moving toward AI-driven IT operations, including automated self-healing, smarter incident monitoring, and deeper analytics for program management. This role offers meaningful influence in shaping enterprise solution requirements and guiding new solution development directly with the client. We offer competitive pay, full health benefits, 401(k) employer matching, holiday, paid time off, and more. The position is remote, with periodic site visits for teleworkers, and we maintain an equal employment opportunity workplace. last updated 36 week of 2026