Splunk ITSI Engineer

🕒 October 14

🇺🇸 United States – Remote

💵 $150k - $165k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👷🏻‍♀️ Engineer

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Nakupuna Companies

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

💼 Consulting

🏛️ Government

📦 Logistics

Consulting • Government • Logistics

Nakupuna Companies is a Native Hawaiian Organization-owned family of companies that operates across various sectors including mission and business operations, IT services, facilities and infrastructure, environmental services, and logistics. Their primary focus is to provide innovative solutions that address technical and programmatic challenges for government partners while promoting the advancement of the Native Hawaiian community through targeted initiatives and investments. Headquartered in Hawai‘i, they also maintain offices in multiple states across the U. S. , combining the capabilities of large entities with the agility of small businesses.

📋 Description

• Lead the design, installation, hardening, configuration, and operationalization of Splunk ITSI with the existing Splunk engineering team • Ingest and normalize security, application, and infrastructure telemetry from disparate data sources • Assess log quality, field consistency, and collection methods • Define ITSI entities, services, KPIs, thresholds, and dependencies for proactive service health monitoring • Develop and tune Notable Event Aggregation Policies to correlate related events and reduce duplicate alerts • Build Glass Tables, Deep Dives, and executive dashboards showing real-time service health, trends, and operational risk • Align service health models and alerting with vulnerability management priorities and Government cybersecurity and operations stakeholders • Configure and troubleshoot Splunk searches, alerts, reports, visualizations, add-ons, and data onboarding • Support secure configuration and access controls according to DoD and DON requirements, DISA STIGs, and the Risk Management Framework • Validate data flows, ITSI calculations, dashboards, and event grouping; refine configurations as operational needs evolve • Document architecture, configurations, standard operating procedures, lessons learned, and best practices • Provide training and knowledge transfer to NAVSUP BSC personnel • Provide weekly status updates on completed work, remaining tasks, dependencies, and issues

🎯 Requirements

• Experience designing, installing, administering, and troubleshooting Splunk ITSI in a Splunk Enterprise environment • Ability to model IT services, entities, KPIs, health scores, thresholds, and dependencies • Experience with ITSI Glass Tables, Deep Dives, Event Analytics, Notable Event Aggregation Policies, and Episode Review • Strong Splunk Search Processing Language (SPL) skills and experience developing searches, alerts, reports, dashboards, and data models • Experience onboarding, normalizing, and correlating logs and telemetry from security, application, and infrastructure systems • Knowledge of Splunk forwarders, search and deployment servers, clustered indexers, add-ons, and data collection methods such as Syslog, JDBC, and APIs • Experience with Linux and Windows environments, Splunk configuration files, field extractions, lookups, and access controls • Ability to work with Government cybersecurity and operations teams on vulnerability priorities, secure configuration, continuous monitoring, auditing, and reporting • Experience developing technical documentation, training users, communicating progress, and resolving dependencies across teams • Bachelor’s degree in a technical field, such as engineering or computer science, required • CompTIA Security+ CE certification or equivalent certification approved for the position required • One of the following Splunk certifications required: Splunk IT Service Intelligence Certified Admin (Legacy), Splunk Enterprise Certified Admin, Splunk Enterprise Certified Architect, Splunk Cloud Certified Admin, Splunk Enterprise Security Certified Admin, or Splunk Certified Developer • Government or DoD environment experience desired

🏖️ Benefits

• Medical, dental, and vision insurance • HSAs and FSAs • 401(k) retirement plan with employer contributions • Paid time off and holidays • Life and disability insurance • Employee assistance programs • Tuition assistance and professional development opportunities • Military differential pay • Other voluntary benefit programs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume