Splunk ITSI Developer

Kforce has a client in McLean, VA that is seeking a Splunk ITSI Developer. Responsibilities:

• Engineer, configure, administer, and support enterprise observability solution, including both Splunk Cloud, Splunk ITSI and Splunk Infrastructure Monitoring Enterprise Edition
• Develop ITSI glass tables, service trees, Entity design, KPI's and correlation searches
• Perform root-cause analysis of any issues that arise post-implementation and work on solutions related to issue fixing
• Create low-level design artifacts independently and high-level design artifacts with guidance and supports prototyping through the creation of POCs
• Develop and maintain Splunk ITSI components such as glass tables, service trees, correlation searches, KPIs, and notable event aggregation policies 1 2
• Install and configure Splunk add-ons, including DB Connect, Active Directory LDAP, and certifications 3 4
• Build dashboards and reports using Splunk Core and ITSI, often integrating with tools like SignalFX, New Relic APM, and Kafka Connect 5
• Support observability and monitoring across enterprise environments, including cloud platforms like AWS, Azure, and GCP 6
• Collaborate with federal teams (e.g., IRS ETID PMO) on programs like the Integrated Enterprise Portal (IEP) Splunk expansion
• 4-5+ years of Splunk experience, with at least 3 years in ITSI development
• Hands-on experience with enterprise-scale Splunk Cloud implementations and rule/logic creation
• Strong scripting and development skills in JavaScript, Python, HTML, CSS, and JSON
• Experience with IT operations or security, including risk management and audit compliance
• Knowledge of IRS lifecycle programs such as RRP and IPM is a plus
• Applicants selected will be subject to a government security investigation and must meet eligibility requirements for access to classified information