AI OPS Engineer

Nowges; Fort Belvoir (VA); On-site; USD 160,000 - 175,000; Full time

Job summary

GES is seeking a Senior AIOps Engineer to lead the design, deployment, and management of AIOps solutions securing DoW networks. You will orchestrate Splunk ITSI, ServiceNow, and SolarWinds integrations to provide real-time observability and automated remediation.

The role requires top-secret/sci clearance, advanced Splunk expertise, and a track record in DoD environments. Expect cross-functional leadership, secure data pipelines, and ML-driven anomaly detection to support mission-critical

Qualifications

• Active TS/SCI clearance required at time of hire.
• IAT Level II certification (Security+ CE, CySA+, GSEC, SSCP) required.
• 7+ years of Splunk Enterprise experience (architecture, clustering, SPL).
• 3+ years of AIOps workflows integrating with ServiceNow ITSM for automation.
• Proven ML model development, testing, and tuning with Splunk MLTK.
• Advanced scripting for custom search commands, APIs, remediation tasks (Python).
• Experience leading technical teams and interfacing with leadership boards.

Responsibilities

• Lead the AIOps platform initiative across cross-functional teams (Network Eng, ServiceNow, SolarWinds).
• Architect closed-loop remediation workflows by integrating Splunk ITSI with ServiceNow Event/Incident Management.
• Maintain Splunk AIOps across unclassified and classified enclaves for real-time visibility.
• Integrate SolarWinds telemetry with server and app logs for enterprise health view.
• Develop and deploy ML models via Splunk MLTK to detect anomalies and threats.
• Design secure data ingestion pipelines for cross-domain telemetry and edge devices.
• Reduce incident noise and prioritize high-impact mission alerts using ITSI.
• Collaborate with CSSP to align AIOps insights with cyber defense operations.

Skills

Leadership

DoD/NOC/SOC experience

Splunk Enterprise

AIOps & ITSM automation

Machine Learning with Splunk MLTK

Python scripting

Communicating with leadership

Security clearance TS/SCI

IAT Level II certification

Tools

Splunk Enterprise

ServiceNow

SolarWinds

MLTK (Splunk)

SPL

VMware vCenter

Job description

If you are unable to complete this application due to a disability, contact this employer to ask for an accommodation or an alternative application process.

Full Time Fort Belvoir, VA, US

Salary Range: $160,000.00 To $175,000.00 Annually

GES is seeking a Senior AIOps Engineer to support critical mission operations within a secure environment and lead the transformation of our IT Service Management (ITSM) capabilities. This role is responsible for the design, deployment, and management of AIOps solutions that enhance the reliability and security of Department of War (DoW) networks and systems. Acting as the technical lead for this initiative, you will orchestrate integrations across existing Network Engineering, ServiceNow, and SolarWinds teams. You will utilize Splunk and the Machine Learning Toolkit (MLTK) to provide descriptive and predictive analytics and establish closed-loop automated incident response, ensuring the high availability of mission-essential infrastructure.

Primary Responsibilities

• Cross-Functional Leadership: Lead the AIOps platform initiative by acting as the primary technical liaison to existing Network Engineering, ServiceNow, and SolarWinds administration teams toestablishunified telemetry pipelines.
• ITSM Orchestration & Automation: Architect closed-loop remediation workflows by deeply integrating Splunk ITSI alerts with ServiceNow Event Management and Incident Management modules.
• Mission-Critical Observability: Architect and maintain Splunk AIOps solutions across unclassified and classified enclaves to provide real-time situational awareness.
• Infrastructure Telemetry Integration: Normalize and correlate network performance and fault data from SolarWinds with server and application logs toprovidea holistic view of enterprise health.
• Advanced ML Development: Deploy custom machine learning models via Splunk MLTK toidentifyanomalous behavior, potential cyber threats, and infrastructure degradations.
• Secure Data Integration: Engineer secure data ingestion pipelines for telemetry data from cross-domain solutions and tactical edge devices.
• Incident Reduction:UtilizeIT Service Intelligence (ITSI) to correlate multi-source events, reducing noise and prioritizing high-impact mission alerts.
• Cyber Defense Support: Collaborate with the Cyber Security Service Provider (CSSP) to integrate AIOps insights into defensive cyber operations (DCO).
• Compliance & Documentation: Ensure all observability toolscomply withDoWSTIGs and IL5/IL6 protocols; develop andmaintainarchitectural documentation and compliance traceability.
• Mission Alignment: Stay current on AIOps and related capabilities relevant to DoD, federal, and intelligence mission systems.

Required Qualifications

• Security Clearance: Active Top Secret / Sensitive Compartmented Information (TS/SCI)requiredat time of hire.
• Certification: Active IAT Level II certification (e.g., Security+ CE,CySA+, GSEC, or SSCP)required.
• Platform Experience: 7+ years of experience with Splunk Enterprise, including architectural design, cluster management, and advanced Search Processing Language (SPL).
• AIOps & ITSM: 3+ years of experience implementing AIOps workflows, including integration with enterprise ITSM solutions (ServiceNow) for automated root cause analysis and remediation.
• Machine Learning: Proventrack recordof building, testing, and tuning supervised and unsupervised models within the Splunk MLTK.
• Scripting & Automation: Advanced scripting skills for developing custom search commands, API integrations, and automating remediation tasks (e.g., Python).
• Leadership: Experience leading technical working groups and directing the efforts of adjacent infrastructure and development teams.
• Operational Experience: Prior experience working within a DoW /DoD Operations Center (NOC/SOC) or supporting mission-critical systems and networks.
• Communication: Must be able to present designs, plans, and analyses of alternatives to technical leadership boards forapprovals.

Desired Qualifications

• Enterprise Aggregation: Experience aggregating and correlating telemetry from diverse tools, specifically SolarWinds, ServiceNow, and VMware vCenter.
• Expert Certification: Splunk Enterprise Certified Architect or Splunk ITSI Certified Admin.
• Cloud Observability: Experience with Cloud Native Computing Foundation (CNCF) observability tools in secure hybrid multi-cloud environments (Azure/AWS).
• RMF/ATO Knowledge: Understanding of the Risk Management Framework (RMF) and the Authorization to Operate (ATO) process for AI/ML workloads.