Splunk Engineer

Position: Sr Splunk ITSI Engineer 

Location; Miami, Florida

Duration; 3 to 6 Months++

15+ Years

Job Title: Splunk ITSI Engineer

3-6 months

onsite - St, Doral, FL 33172, USA

*** MUST HAVE SECRET CLEARANCE***

We are seeking a detail-oriented and technically proficient Splunk ITSI Engineer to design, deploy, and manage our Splunk IT Service Intelligence (ITSI) platform. This role is critical in providing real-time visibility into the health and performance of IT services, reducing downtime, and enabling proactive incident management. The ideal candidate will have strong experience with Splunk core, a deep understanding of service monitoring, and a passion for delivering high-value insights to IT and business stakeholders.

Key Responsibilities • Deploy and configure Splunk ITSI, including services, entities, KPIs, and glass tables.

• Create and manage IT service models that map infrastructure components to business services.
• Define and tune Key Performance Indicators (KPIs) to monitor system and service health.
• Build Glass Tables and dashboards to provide real-time visualizations for various teams in the organization.
• Implement episode review workflows to group related alerts and reduce noise.
• Develop and apply anomaly detection models and baseline thresholds for proactive alerting.
• Integrate ITSI with alerting and ITSM tools (e.g., ServiceNow) for automated incident response.
• Install and configure MLTK (Splunk Machine Learning toolkit)
• Build and train service adaptative thresholding
• Collaborate with infrastructure, application, and other teams to onboard data sources and refine service visibility.
• Monitor and optimize the performance and scalability of the ITSI environment.
• Document architecture, KPIs, service definitions, and procedures.
• Install and configure content packs

Qualifications

Required: • 2–5 years of experience in Splunk administration, with a focus on ITSI or service monitoring.

• Proven ability to build and manage services, KPIs, and Glass Tables within Splunk ITSI.
• Strong understanding of infrastructure and application monitoring, including logs and metrics.
• Experience working with enterprise IT environments (e.g., servers, databases, cloud platforms).
• Familiarity with ITIL concepts such as incident, problem, and change management.
• Excellent troubleshooting, documentation, and communication skills. Preferred:
• Splunk certifications (e.g., Splunk Core Certified Admin, Splunk ITSI Certified Admin).
• Experience with ServiceNow or other ITSM tools.
• Exposure to DevOps or SRE practices.
• Knowledge of machine learning-based anomaly detection and predictive analytics.