Splunk ITSI Engineer for Proactive Service Health (Remote)

Nakupuna Consulting; United States; Remote; USD 150,000 - 165,000; Full time

Job summary

Nakupuna Companies seeks a Splunk ITSI Engineer to lead the architecture, deployment, configuration, and operationalization of Splunk ITSI for NAVSUP BSC. The role integrates security and IT telemetry to provide a unified monitoring view and reduce alert noise.

You will define ITSI entities, KPIs, thresholds, and dependencies, build Glass Tables and dashboards, and align health models with vulnerability management priorities in coordination with government cybersecurity and operations teams.

Qualifications

• Experience designing, installing, administering, and troubleshooting Splunk ITSI in a Splunk Enterprise environment.
• Ability to model IT services, entities, KPIs, health scores, thresholds, and dependencies that reflect operational priorities.
• Experience with ITSI Glass Tables, Deep Dives, Event Analytics, Notable Event Aggregation Policies, and Episode Review.
• Strong SPL skills and experience developing searches, alerts, reports, dashboards, and data models.
• Experience onboarding, normalizing, and correlating logs and telemetry from security, application, and infrastructure systems.
• Knowledge of Splunk forwarders, search and deployment servers, clustered indexers, add-ons, and data collection methods such as Syslog, JDBC, and APIs.
• Experience with Linux and Windows environments and Splunk configuration files, field extractions, lookups, and access controls.
• Ability to work with Government cybersecurity and operations teams on vulnerability priorities, secure configuration, continuous monitoring, auditing, and reporting.
• Experience developing technical documentation, training users, communicating progress, and resolving dependencies across teams.

Responsibilities

• Lead the design, installation, hardening, configuration, and operationalization of Splunk ITSI in coordination with the existing Splunk engineering team.
• Ingest and normalize security, application, and infrastructure telemetry from disparate data sources; assess log quality, field consistency, and collection methods.
• Define ITSI entities, services, KPIs, thresholds, and dependencies to provide proactive service health monitoring.
• Develop and tune Notable Event Aggregation Policies (NEAP) to correlate related events, reduce duplicate alerts, and support incident investigation.
• Build Glass Tables, Deep Dives, and executive dashboards that present real-time service health, trends, and operational risk.
• Align service health models and alerting with vulnerability management priorities in consultation with Government cybersecurity and operations stakeholders.
• Configure and troubleshoot related Splunk searches, alerts, reports, visualizations, add-ons, and data onboarding within the existing platform.
• Document architecture, configurations, SOPs, lessons learned, and best practices; provide training and knowledge transfer to NAVSUP BSC personnel.
• Provide weekly status updates on work completed, remaining tasks, dependencies, and issues.

Skills

Splunk ITSI

SPL expertise

Linux & Windows

Documentation

Training & knowledge transfer

Security collaboration

Education

Bachelor's degree in a technical field

Tools

Splunk Enterprise

Splunk ITSI Admin Certification

Syslog, JDBC, APIs data collection

Job description

Nakupuna Companies seeks a Splunk ITSI Engineer to lead the architecture, deployment, configuration, and operationalization of Splunk ITSI for NAVSUP BSC. The role integrates security and IT telemetry to provide a unified monitoring view and reduce alert noise.

You will define ITSI entities, KPIs, thresholds, and dependencies, build Glass Tables and dashboards, and align health models with vulnerability management priorities in coordination with government cybersecurity and operations teams.