Splunk ITSI Engineer

Nakupuna Companies

. Lead the design, installation, hardening, configuration, and operationalization of Splunk ITSI with the existing Splunk engineering team .

Posted 10/14/2026full-timeRemote • United StatesMid-LevelSenior💰 $150,000 - $165,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing, configuring, and operationalizing Splunk ITSI, with a strong focus on data ingestion, normalization, and proactive service health monitoring. Proficient in developing dashboards, alerts, and reports while ensuring compliance with Government cybersecurity standards.

Highest-signal resume keywords

Splunk IT Service Intelligence AdministrationSplunk Search Processing Language (SPL)Data Normalization and CorrelationTechnical Documentation DevelopmentCompTIA Security+ CE Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Splunk ITSI DesignEvent AnalyticsNotable Event Aggregation PoliciesKPI ModelingData OnboardingLinux and Windows EnvironmentsField ExtractionsAccess ControlsDashboard DevelopmentLog Quality Assessment

Soft Skills

Training and Knowledge TransferCommunication of ProgressCollaboration with Teams

Tools & Technologies

Splunk EnterpriseGlass TablesDeep DivesAPIsSyslogJDBC

Certifications & Qualifications

CompTIA Security+ CESplunk IT Service Intelligence Certified AdminSplunk Enterprise Certified AdminSplunk Enterprise Certified ArchitectSplunk Cloud Certified AdminSplunk Enterprise Security Certified AdminSplunk Certified Developer

Industry Keywords

Government CybersecurityDoD EnvironmentRisk Management FrameworkDISA STIGsContinuous Monitoring

Tech Stack

Tools & technologies

CloudCyber SecurityLinuxSplunk

About the role

Key responsibilities & impact

Lead the design, installation, hardening, configuration, and operationalization of Splunk ITSI with the existing Splunk engineering team
Ingest and normalize security, application, and infrastructure telemetry from disparate data sources
Assess log quality, field consistency, and collection methods
Define ITSI entities, services, KPIs, thresholds, and dependencies for proactive service health monitoring
Develop and tune Notable Event Aggregation Policies to correlate related events and reduce duplicate alerts
Build Glass Tables, Deep Dives, and executive dashboards showing real-time service health, trends, and operational risk
Align service health models and alerting with vulnerability management priorities and Government cybersecurity and operations stakeholders
Configure and troubleshoot Splunk searches, alerts, reports, visualizations, add-ons, and data onboarding
Support secure configuration and access controls according to DoD and DON requirements, DISA STIGs, and the Risk Management Framework
Validate data flows, ITSI calculations, dashboards, and event grouping; refine configurations as operational needs evolve
Document architecture, configurations, standard operating procedures, lessons learned, and best practices
Provide training and knowledge transfer to NAVSUP BSC personnel
Provide weekly status updates on completed work, remaining tasks, dependencies, and issues

Requirements

What you’ll need

Experience designing, installing, administering, and troubleshooting Splunk ITSI in a Splunk Enterprise environment
Ability to model IT services, entities, KPIs, health scores, thresholds, and dependencies
Experience with ITSI Glass Tables, Deep Dives, Event Analytics, Notable Event Aggregation Policies, and Episode Review
Strong Splunk Search Processing Language (SPL) skills and experience developing searches, alerts, reports, dashboards, and data models
Experience onboarding, normalizing, and correlating logs and telemetry from security, application, and infrastructure systems
Knowledge of Splunk forwarders, search and deployment servers, clustered indexers, add-ons, and data collection methods such as Syslog, JDBC, and APIs
Experience with Linux and Windows environments, Splunk configuration files, field extractions, lookups, and access controls
Ability to work with Government cybersecurity and operations teams on vulnerability priorities, secure configuration, continuous monitoring, auditing, and reporting
Experience developing technical documentation, training users, communicating progress, and resolving dependencies across teams
Bachelor’s degree in a technical field, such as engineering or computer science, required
CompTIA Security+ CE certification or equivalent certification approved for the position required
One of the following Splunk certifications required: Splunk IT Service Intelligence Certified Admin (Legacy), Splunk Enterprise Certified Admin, Splunk Enterprise Certified Architect, Splunk Cloud Certified Admin, Splunk Enterprise Security Certified Admin, or Splunk Certified Developer
Government or DoD environment experience desired

Benefits

Comp & perks

Medical, dental, and vision insurance
HSAs and FSAs
401(k) retirement plan with employer contributions
Paid time off and holidays
Life and disability insurance
Employee assistance programs
Tuition assistance and professional development opportunities
Military differential pay
Other voluntary benefit programs