Splunk ITSI Engineer

TL;DR

Splunk ITSI Engineer: Design, implement, and administer Splunk ITSI environments for federal customers' large enterprise Splunk setups with an accent on advanced configurations, entity integrations, service insights, and custom glass tables. Focus on ground-up distributed installations, event analytics, and maintaining enterprise-scale systems integrated with tools like AWS, Cribl, Syslog, and Axonius.

Location: 100% Remote (U.S. Citizenship required as this is in support of a Federal Customer)

Company

Veteran-owned small business focused on enabling people and technology for top-tier services to federal customers, recognized as a Best Places to Work and Inc. Magazine’s Top 5000 Fastest Growing Companies.

What you will do

• Design and implement distributed Splunk ITSI installations from the ground up.
• Configure advanced ITSI features including entity integrations, service insights, and event analytics.
• Maintain and administer enterprise Splunk ITSI environments integrated with large Splunk setups and other tools.
• Develop custom ITSI glass tables and meaningful data views.
• Collaborate with large teams and multiple customers to manage expectations and track engagement scope.
• Configure storage subsystems, SELinux, FAPolicyd, and file permissions in Linux/Windows environments.

Requirements

• Splunk IT Service Intelligence Certified Administrator
• Splunk Architect Certification or higher
• ITSI certification
• Minimum 6-8 years of relevant experience; 2-3 years with Splunk ITSI
• Enterprise experience in collaborative environments
• Excellent written and oral communication skills
• U.S. Citizenship required

Nice to have

• Splunk Core Consultant Certification
• Cloud experience (AWS, Azure)
• Cribl experience with pipelines, packs, regex, and routes
• Government CDM Programs experience
• Axonius familiarity
• Development/API experience (Python, Perl, XML)
• Ansilble, Spacewalk, hardware/storage (SAN, NAS)

Culture & Benefits

• Access to full knowledge base, technical backing from PS team, internal Slack, and tools for training/demos.
• Competitive salary paid twice per month; 100% medical premiums covered.
• 3 weeks PTO + 11 paid holidays; 401k with 100% company match on first 4%.
• Monthly cell phone and home internet reimbursement.
• Paternity/maternity leave; investment in training and certifications.
• Company-wide new business incentives and contribution rewards (white papers, webinars).