Sr Splunk ITSI Engineer - ONSITE

Job Description

Job Title: Splunk ITSI Engineer

3-6 months

onsite - St, Doral, FL 33172, USA

*** MUST HAVE SECRET CLEARANCE***

We are seeking a detail-oriented and technically proficient Splunk ITSI Engineer to design, deploy, and manage our Splunk IT Service Intelligence (ITSI) platform. This role is critical in providing real-time visibility into the health and performance of IT services, reducing downtime, and enabling proactive incident management. The ideal candidate will have strong experience with Splunk core, a deep understanding of service monitoring, and a passion for delivering high-value insights to IT and business stakeholders.

Key Responsibilities • Deploy and configure Splunk ITSI, including services, entities, KPIs, and glass tables.

• Create and manage IT service models that map infrastructure components to business services.

• Define and tune Key Performance Indicators (KPIs) to monitor system and service health.

• Build Glass Tables and dashboards to provide real-time visualizations for various teams in the organization.

• Implement episode review workflows to group related alerts and reduce noise.

• Develop and apply anomaly detection models and baseline thresholds for proactive alerting.

• Integrate ITSI with alerting and ITSM tools (e.g., ServiceNow) for automated incident response.

• Install and configure MLTK (Splunk Machine Learning toolkit)

• Build and train service adaptative thresholding

• Collaborate with infrastructure, application, and other teams to onboard data sources and refine service visibility.

• Monitor and optimize the performance and scalability of the ITSI environment.

• Document architecture, KPIs, service definitions, and procedures.

• Install and configure content packs

Qualifications

Required: • 2–5 years of experience in Splunk administration, with a focus on ITSI or service monitoring.

• Proven ability to build and manage services, KPIs, and Glass Tables within Splunk ITSI.

• Strong understanding of infrastructure and application monitoring, including logs and metrics.

• Experience working with enterprise IT environments (e.g., servers, databases, cloud platforms).

• Familiarity with ITIL concepts such as incident, problem, and change management.

• Excellent troubleshooting, documentation, and communication skills. Preferred:

• Splunk certifications (e.g., Splunk Core Certified Admin, Splunk ITSI Certified Admin).

• Experience with ServiceNow or other ITSM tools.

• Exposure to DevOps or SRE practices.

• Knowledge of machine learning-based anomaly detection and predictive analytics.

Full-time