Splunk ITSI SME

Enterprise Horizon Consulting Group; United States; On-site; USD 150,000 - 210,000; Full time

Benefits offered by this job

Medical, Dental & Vision

Life Insurance

Short-term Disability

SIMPLE IRA with Company Match

Vacation & Sick Leave

Referral Bonus

Job summary

Enterprise Horizon Consulting Group is seeking a Splunk ITSI Subject Matter Expert (SME) to lead design, implementation, and optimization of advanced Splunk monitoring and observability solutions within a complex DoD environment.

This hands-on engineering role requires architecting innovative Splunk solutions, integrating new data sources, and driving adoption of ITSI capabilities across the enterprise, with a focus on security, reliability, and scalable operations.

Qualifications

• Active Secret Clearance required.
• IAT II Security+ or higher‑level certification required.
• Strong knowledge of the DoD Secure Cloud Computing Architecture (SCCA) framework, specifically the Virtual Datacenter Management Stack (VDMS) and enterprise log management standards.
• Experience operating within Department of Defense (DoD) cloud‑hosted ecosystems and collaborating with enterprise cloud service providers.
• Hands‑on experience implementing and operationalizing Splunk ITSI in enterprise environments.
• Strong experience with Splunk Enterprise administration, engineering, or architecture.
• Strong understanding of service health modeling, KPI development, event correlation, and observability best practices.
• Experience integrating data from infrastructure, application, cloud, security, and operational systems.
• Strong troubleshooting, analytical, and problem‑solving skills.
• Ability to lead technical discussions and translate requirements into scalable monitoring solutions.
• Excellent written and verbal communication skills.
• Splunk‑related certification highly desired.

Responsibilities

• Architect, configure, and optimize Splunk within the DoD Secure Cloud Computing Architecture (SCCA) VDMS to support enterprise-wide log management, security auditing, and telemetry collection.
• Integrate Splunk observability solutions with DoD cloud broker frameworks and shared service boundaries to ensure seamless visibility across multi-cloud and hybrid environments.
• Align Splunk ITSI service health models and KPI structures with DoD cloud governance standards and operational readiness requirements.
• Design and implement new monitoring, observability, and service intelligence capabilities rather than simply maintaining existing platforms.
• Develop service health models, KPIs, service dependencies, and entity relationships to improve operational awareness and system reliability.
• Build and maintain custom Splunk ITSI Glass Tables, Deep Dives, and high‑level dashboards to provide real‑time operational visibility and executive service‑health tracking.
• Configure and optimize Notable Event Aggregation Policies (NEAPs) in Splunk ES to consolidate redundant alerts, minimize false positives, and streamline incident triage for security analysts.
• Integrate and normalize security, infrastructure, application, and operational data from diverse enterprise data sources.
• Collaborate with cybersecurity, infrastructure, and operations teams to align monitoring capabilities with mission and business objectives.
• Evaluate emerging Splunk capabilities and recommend innovative solutions that enhance visibility, automation, and service health monitoring.
• Troubleshoot complex Splunk and ITSI issues, optimize platform performance, and improve scalability.
• Develop technical documentation, implementation plans, standard operating procedures, and knowledge transfer materials.
• Serve as the primary Splunk ITSI SME, providing technical leadership and strategic guidance on monitoring and observability initiatives.

Skills

Splunk ITSI

KPI development

Service health modeling

Data integration

Troubleshooting

Communication skills

Technical leadership

Education

Active Secret Clearance

Security+ certification

Tools

Splunk Enterprise

VDMS

DoD Cloud frameworks

Job description

Enterprise Horizon Consulting Group is seeking a Splunk IT Service Intelligence (ITSI) Subject Matter Expert (SME) to lead the design, implementation, and optimization of advanced Splunk monitoring and observability solutions within a complex Department of Defense (DoD) environment. This is a hands‑on engineering role for a true Splunk expert who can architect innovative solutions, integrate new data sources, and drive the adoption of Splunk ITSI capabilities across the enterprise.

Key Responsibilities

• Architect, configure, and optimize Splunk within the DoD Secure Cloud Computing Architecture (SCCA) Virtual Datacenter Management Stack (VDMS) to support enterprise-wide log management, security auditing, and telemetry collection.
• Integrate Splunk observability solutions with DoD cloud broker frameworks and shared service boundaries to ensure seamless visibility across multi-cloud and hybrid environments.
• Align Splunk ITSI service health models and KPI structures with DoD cloud governance standards and operational readiness requirements.
• Design and implement new monitoring, observability, and service intelligence capabilities rather than simply maintaining existing platforms.
• Develop service health models, KPIs, service dependencies, and entity relationships to improve operational awareness and system reliability.
• Build and maintain custom Splunk ITSI Glass Tables, Deep Dives, and high-level dashboards to provide real‑time operational visibility and executive service‑health tracking.
• Configure and optimize Notable Event Aggregation Policies (NEAPs) in Splunk ES to consolidate redundant alerts, minimize false positives, and streamline incident triage for security analysts.
• Integrate and normalize security, infrastructure, application, and operational data from diverse enterprise data sources.
• Collaborate with cybersecurity, infrastructure, and operations teams to align monitoring capabilities with mission and business objectives.
• Evaluate emerging Splunk capabilities and recommend innovative solutions that enhance visibility, automation, and service health monitoring.
• Troubleshoot complex Splunk and ITSI issues, optimize platform performance, and improve scalability.
• Develop technical documentation, implementation plans, standard operating procedures, and knowledge transfer materials.
• Serve as the primary Splunk ITSI SME, providing technical leadership and strategic guidance on monitoring and observability initiatives.

Requirements

• Active Secret Clearance required.
• IAT II (Security+) or higher‑level certification required.
• Strong knowledge of the DoD Secure Cloud Computing Architecture (SCCA) framework, specifically the Virtual Datacenter Management Stack (VDMS) and enterprise log management standards.
• Experience operating within Department of Defense (DoD) cloud‑hosted ecosystems and collaborating with enterprise cloud service providers.
• Hands‑on experience implementing and operationalizing Splunk ITSI in enterprise environments.
• Strong experience with Splunk Enterprise administration, engineering, or architecture.
• Strong understanding of service health modeling, KPI development, event correlation, and observability best practices.
• Experience integrating data from infrastructure, application, cloud, security, and operational systems.
• Strong troubleshooting, analytical, and problem‑solving skills.
• Ability to lead technical discussions and translate requirements into scalable monitoring solutions.
• Excellent written and verbal communication skills.
• Splunk‑related certification highly desired.

Benefits

• We offer full‑time salaried employees competitive salaries with a range of benefits, including: Medical, Dental, & Vision Life Insurance, Short‑term Disability, Long‑term Disability SIMPLE IRA with Company Match Federal Holidays Vacation & Sick Leave $500 Referral Bonus

Enterprise Horizon Consulting Group is an equal opportunity employer. Enterprise Horizon Consulting Group does not discriminate against any employee or applicant for employment on the basis of race, color, religion, sex, marital status, sexual orientation, gender identity, national origin, ancestry, age (40 and over), physical or mental disability, or protected veteran status, or any other protected status in accordance with all applicable federal, state and local laws.