Splunk ITSI SME

Enterprise Horizon Consulting Group; Oregon; Hybrid; USD 130,000 - 180,000; Full time

Benefits offered by this job

Medical, Dental, & Vision

Life Insurance, Short-term Disability,

Long-term Disability

SIMPLE IRA with Company Match

Federal Holidays

Vacation & Sick Leave

Job summary

Enterprise Horizon Consulting Group is seeking a Splunk ITSI Subject Matter Expert to lead design, implementation, and optimization of advanced Splunk monitoring within a DoD environment. This is a hands-on engineering role for an expert who can architect, integrate data sources, and advance Splunk ITSI adoption enterprise-wide.

The role requires deep Splunk expertise, security clearance, and the ability to collaborate with cybersecurity, infrastructure, and operations teams to deliver scalable

Qualifications

• Experience delivering Splunk ITSI in enterprise environments.
• Strong understanding of observability, KPIs, and service health.
• Ability to architect scalable monitoring solutions in complex environments.

Responsibilities

• Architect, configure, and optimize Splunk within the DoD SCCA VDMS.
• Integrate Splunk with multi-cloud and hybrid environments for enterprise visibility.
• Align service health models and KPIs with governance standards.
• Design and implement new monitoring and observability capabilities.
• Develop dashboards and dashboards for executive service-health tracking.

Skills

Clear communication

DoD environment knowledge

Troubleshooting

Technical leadership

Requirements translation

Tools

Splunk ITSI

Splunk Enterprise

Glass Tables

Job description

Enterprise Horizon Consulting Group is seeking a Splunk IT Service Intelligence (ITSI) Subject Matter Expert (SME) to lead the design, implementation, and optimization of advanced Splunk monitoring and observability solutions within a complex Department of Defense (DoD) environment. This is a hands-on engineering role for a true Splunk expert who can architect innovative solutions, integrate new data sources, and drive the adoption of Splunk ITSI capabilities across the enterprise.

Key Responsibilities

• Architect, configure, and optimize Splunk within the DoD Secure Cloud Computing Architecture (SCCA) Virtual Datacenter Management Stack (VDMS) to support enterprise-wide log management, security auditing, and telemetry collection.
• Integrate Splunk observability solutions with DoD cloud broker frameworks and shared service boundaries to ensure seamless visibility across multi-cloud and hybrid environments.
• Align Splunk ITSI service health models and KPI structures with DoD cloud governance standards and operational readiness requirements.
• Design and implement new monitoring, observability, and service intelligence capabilities rather than simply maintaining existing platforms.
• Develop service health models, KPIs, service dependencies, and entity relationships to improve operational awareness and system reliability.
• Build and maintain custom Splunk ITSI Glass Tables, Deep Dives, and high-level dashboards to provide real-time operational visibility and executive service-health tracking.
• Configure and optimize Notable Event Aggregation Policies (NEAPs) in Splunk ES to consolidate redundant alerts, minimize false positives, and streamline incident triage for security analysts.
• Integrate and normalize security, infrastructure, application, and operational data from diverse enterprise data sources.
• Collaborate with cybersecurity, infrastructure, and operations teams to align monitoring capabilities with mission and business objectives.
• Evaluate emerging Splunk capabilities and recommend innovative solutions that enhance visibility, automation, and service health monitoring.
• Troubleshoot complex Splunk and ITSI issues, optimize platform performance, and improve scalability.
• Develop technical documentation, implementation plans, standard operating procedures, and knowledge transfer materials.
• Serve as the primary Splunk ITSI SME, providing technical leadership and strategic guidance on monitoring and observability initiatives.

Requirements

• Active Secret Clearance required.
• IAT II (Security+) or higher-level certification required.
• Strong knowledge of the DoD Secure Cloud Computing Architecture (SCCA) framework, specifically the Virtual Datacenter Management Stack (VDMS) and enterprise log management standards.
• Experience operating within Department of Defense (DoD) cloud-hosted ecosystems and collaborating with enterprise cloud service providers.
• Hands-on experience implementing and operationalizing Splunk ITSI in enterprise environments.
• Strong experience with Splunk Enterprise administration, engineering, or architecture.
• Strong understanding of service health modeling, KPI development, event correlation, and observability best practices.
• Experience integrating data from infrastructure, application, cloud, security, and operational systems.
• Strong troubleshooting, analytical, and problem-solving skills.
• Ability to lead technical discussions and translate requirements into scalable monitoring solutions.
• Excellent written and verbal communication skills.
• Splunk-related certification highly desired.

Benefits

We offer full-time salaried employees competitive salaries with a range of benefits, including:

• Medical, Dental, & Vision
• Life Insurance, Short-term Disability, Long-term Disability
• SIMPLE IRA with Company Match
• Federal Holidays
• Vacation & Sick Leave

Enterprise Horizon Consulting Group is an equal opportunity employer. Enterprise Horizon Consulting Group does not discriminate against any employee or applicant for employment on the basis of race, color, religion, sex, marital status, sexual orientation, gender identity, national origin, ancestry, age (40 and over), physical or mental disability, or protected veteran status, or any other protected status in accordance with all applicable federal, state and local laws.