Splunk ITSI Engineer

Ellington Solutions is seeking out qualified candidates that will:

• Ensure real-time visibility into the status and performance of IT services, minimizing downtime, and facilitating proactive incident management.

• Set up and configure Splunk ITSI, which includes services, entities, KPIs, and glass tables.

• Develop and oversee IT service models that connect infrastructure components to business services.

• Establish and refine Key Performance Indicators (KPIs) to monitor the health of systems and services.

• Create Glass Tables and dashboards that deliver real-time visual insights for different teams within the organization.

• Implement workflows for episode reviews to consolidate related alerts and decrease alert noise.

• Design and utilize anomaly detection models and baseline thresholds for proactive notifications.

• Integrate ITSI with alerting and ITSM tools (e.g., ServiceNow) to automate incident response.

• Install and configure the Machine Learning Toolkit (MLTK) for Splunk.

• Develop and train adaptive thresholding for services.

• Work collaboratively with infrastructure, application, and other teams to onboard data sources and enhance service visibility.

• Monitor and enhance the performance and scalability of the ITSI environment.

• Document the architecture, KPIs, service definitions, and procedures.

• Install and configure content packs.

The qualified candidate will have:

• U.S. Citizenship (Required)

• Minimum of Secret Clearance (Required)

• Experience with Splunk Core

• A minimum of two (2) to five (5) years in Splunk administration, with a specific focus on ITSI or service monitoring.

• Demonstrated expertise in developing and overseeing services, KPIs, and Glass Tables within Splunk ITSI.

• Comprehensive knowledge of infrastructure and application monitoring, including the analysis of logs and metrics.

• Experience operating in enterprise IT environments such as servers, databases, and cloud platforms.

• Understanding of ITIL frameworks, including incident, problem, and change management.

• Strong skills in troubleshooting, documentation, and communication. Preferred qualifications include:

• Possession of Splunk certifications (e.g., Splunk Core Certified Admin, Splunk ITSI Certified Admin).

• Familiarity with ServiceNow or similar ITSM tools.

• Exposure to DevOps or Site Reliability Engineering (SRE) practices.

• Familiarity with machine learning-based anomaly detection and predictive analytics.