Job Description

Splunk Itsi Engineer

NOTE - this is a 2-3 month contract on location in Doral, FL Generous hourly rate to cover all expenses MUST have a DOD Secret clearance

We are seeking a detail-oriented and technically proficient Splunk ITSI Engineer to design, deploy, and manage our Splunk IT Service Intelligence (ITSI) platform. This role is critical in providing real-time visibility into the health and performance of IT services, reducing downtime, and enabling proactive incident management. The ideal candidate will have strong experience with Splunk core, a deep understanding of service monitoring, and a passion for delivering high-value insights to IT and business stakeholders.

Key Responsibilities

• Deploy and configure Splunk ITSI, including services, entities, KPIs, and glass tables.
• Create and manage IT service models that map infrastructure components to business services.
• Define and tune Key Performance Indicators (KPIs) to monitor system and service health.
• Build Glass Tables and dashboards to provide real-time visualizations for various teams in the organization.
• Implement episode review workflows to group related alerts and reduce noise.
• Develop and apply anomaly detection models and baseline thresholds for proactive alerting.
• Integrate ITSI with alerting and ITSM tools (e.g., ServiceNow) for automated incident response.
• Install and configure MLTK (Splunk Machine Learning toolkit)
• Build and train service adaptive thresholding.
• Collaborate with infrastructure, application, and other teams to onboard data sources and refine service visibility.
• Monitor and optimize the performance and scalability of the ITSI environment.
• Document architecture, KPIs, service definitions, and procedures.
• Install and configure content packs

Qualifications Required

25 years of experience in Splunk administration, with a focus on ITSI or service monitoring.

Proven ability to build and manage services, KPIs, and Glass Tables within Splunk ITSI.

Strong understanding of infrastructure and application monitoring, including logs and metrics.

Experience working with enterprise IT environments (e.g., servers, databases, cloud platforms).

Familiarity with ITIL concepts such as incident, problem, and change management.

Excellent troubleshooting, documentation, and communication skills.

Preferred

Splunk certifications (e.g., Splunk Core Certified Admin, Splunk ITSI Certified Admin).

Experience with ServiceNow or other ITSM tools.

Exposure to DevOps or SRE practices.

Knowledge of machine learning-based anomaly detection and predictive analytics.

Our Commitment We would love to have you join our team! ECCO Select is committed to hiring and retaining a diverse workforce. ECCO Select's policy is to provide equal opportunity to all people without regard to race, color, religion, national origin, ancestry, marital status, veteran status, age, disability, pregnancy, genetic information, citizenship status, sex, sexual orientation, gender identity or any other legally protected category. Equal Employment Opportunity is The Law This Organization Participates in E-Verify

Job Tags

Similar Jobs