Splunk ITSI SME

Enterprise Horizon Consulting Group; Mechanicsburg (Cumberland County); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Life Insurance

SIMPLE IRA with Company Match

Federal Holidays

Vacation & Sick Leave

$500 Referral Bonus

Job summary

Enterprise Horizon Consulting Group is seeking a Splunk ITSI Subject Matter Expert to lead design, implementation, and optimization of advanced Splunk monitoring in a DoD environment. This is a hands-on engineering role for an expert who can architect solutions, ingest diverse data sources, and drive Splunk ITSI adoption across the enterprise.

The role requires active clearance and experience with Splunk Enterprise, ITSI, and secure cloud architectures.

Qualifications

• Hands-on Splunk ITSI implementation in enterprise environments.
• Active Secret clearance and DoD cloud experience.
• Strong data integration and observability design skills.

Responsibilities

• Architect, configure, and optimize Splunk within DoD Secure Cloud Computing Architecture (SCCA).
• Integrate Splunk observability with DoD cloud broker frameworks and multi-cloud environments.
• Align service health models and KPI structures with governance standards.
• Design and implement monitoring, observability, and service intelligence capabilities.
• Develop service health models, KPIs, dependencies, and entity relationships.
• Build and maintain Splunk ITSI dashboards and Glass Tables for real-time visibility.
• Configure NEAPs in Splunk ES to reduce false positives and streamline triage.
• Collaborate with cyber, infra, and operations teams to meet mission objectives.
• Evaluate emerging Splunk capabilities and recommend innovative solutions.

Skills

Splunk ITSI

Splunk Enterprise

Data integration

Cloud architectures

Security monitoring

DoD SCCA knowledge

VDMS familiarity

Dashboard design

Tools

Splunk ITSI

Splunk Enterprise

Glass Tables

Job description

Enterprise Horizon Consulting Group is seeking a Splunk IT Service Intelligence (ITSI) Subject Matter Expert (SME) to lead the design, implementation, and optimization of advanced Splunk monitoring and observability solutions within a complex Department of Defense (DoD) environment. This is a hands-on engineering role for a true Splunk expert who can architect innovative solutions, integrate new data sources, and drive the adoption of Splunk ITSI capabilities across the enterprise.

Key Responsibilities

• Architect, configure, and optimize Splunk within the DoD Secure Cloud Computing Architecture (SCCA) Virtual Datacenter Management Stack (VDMS) to support enterprise-wide log management, security auditing, and telemetry collection.
• Integrate Splunk observability solutions with DoD cloud broker frameworks and shared service boundaries to ensure seamless visibility across multi-cloud and hybrid environments.
• Align Splunk ITSI service health models and KPI structures with DoD cloud governance standards and operational readiness requirements.
• Design and implement new monitoring, observability, and service intelligence capabilities rather than simply maintaining existing platforms.
• Develop service health models, KPIs, service dependencies, and entity relationships to improve operational awareness and system reliability.
• Build and maintain custom Splunk ITSI Glass Tables, Deep Dives, and high-level dashboards to provide real-time operational visibility and executive service-health tracking.
• Configure and optimize Notable Event Aggregation Policies (NEAPs) in Splunk ES to consolidate redundant alerts, minimize false positives, and streamline incident triage for security analysts.
• Integrate and normalize security, infrastructure, application, and operational data from diverse enterprise data sources.
• Collaborate with cybersecurity, infrastructure, and operations teams to align monitoring capabilities with mission and business objectives.
• Evaluate emerging Splunk capabilities and recommend innovative solutions that enhance visibility, automation, and service health monitoring.
• Troubleshoot complex Splunk and ITSI issues, optimize platform performance, and improve scalability.
• Develop technical documentation, implementation plans, standard operating procedures, and knowledge transfer materials.
• Serve as the primary Splunk ITSI SME, providing technical leadership and strategic guidance on monitoring and observability initiatives.

• Active Secret Clearance required.
• IAT II (Security+) or higher-level certification required.
• Strong knowledge of the DoD Secure Cloud Computing Architecture (SCCA) framework, specifically the Virtual Datacenter Management Stack (VDMS) and enterprise log management standards.
• Experience operating within Department of Defense (DoD) cloud-hosted ecosystems and collaborating with enterprise cloud service providers.
• Hands-on experience implementing and operationalizing Splunk ITSI in enterprise environments.
• Strong experience with Splunk Enterprise administration, engineering, or architecture.
• Strong understanding of service health modeling, KPI development, event correlation, and observability best practices.
• Experience integrating data from infrastructure, application, cloud, security, and operational systems.
• Strong troubleshooting, analytical, and problem-solving skills.
• Ability to lead technical discussions and translate requirements into scalable monitoring solutions.
• Excellent written and verbal communication skills.
• Splunk-related certification highly desired.

Benefits

We offer full-time salaried employees competitive salaries with a range of benefits, including:

• Medical, Dental, & Vision
• Life Insurance, Short-term Disability, Long-term Disability
• SIMPLE IRA with Company Match
• Federal Holidays
• Vacation & Sick Leave
• $500 Referral Bonus

Enterprise Horizon Consulting Group is an equal opportunity employer. Enterprise Horizon Consulting Group does not discriminate against any employee or applicant for employment on the basis of race, color, religion, sex, marital status, sexual orientation, gender identity, national origin, ancestry, age (40 and over), physical or mental disability, or protected veteran status, or any other protected status in accordance with all applicable federal, state and local laws.