The Splunk ITSI Engineer will design, implement, and administer Splunk ITSI environments, working with data and creating glass tables. Requires extensive experience in Splunk and related technologies.
True Zero Technologies, a veteran-owned small business, was founded on the principle that the purposeful enablement of people and technology in an organization directly ties to the quality of its outcomes. True Zero recognizes that said outcomes begin and end with our people, and that is what we have built, a community of like-minded, driven, and passionate individuals and innovators who are aligned in a common goal of delivering top tier services to our customers. In 2023, True Zero was recognized as a “Best Places to Work” in two categories ("Prosperous and Thriving" ($5MM – $50MM in gross revenue) and "Mid-Atlantic Region" (DC, DE, MD, NC, VA, WV)) and in 2022, was recognized as one of Inc. Magazine’s Top 5000 Fastest Growing Companies.
True Zero Technologies is seeking experienced Splunk ITSI engineers or consultants to join our Data Analytics Practice. The position supports the design, implementation, and administration of True Zero's federal customers Splunk ITSI environment, integration with the customers large Enterprise Splunk environment and other various tools. Candidates must possess prior experience working with ITSI, from both an implementation perspective as well as working with data to create meaningful glass tables and views. Candidates with experience in AWS Cloud, Cribl, Syslog, and Axonious is a big plus.
As a TZT consultant, the candidate will receive access to the full knowledge base which is driven by the True Zero community as well as the technical backing of the entire PS team. True Zero encourages collaboration and growth through information sharing and knowledge workshops. The candidate will also have access to our internal Slack channel to stay connected with the team as well as the necessary tools to train, demo, test and grow their professional skills.
Qualification Requirements
- Splunk IT Service Intelligence Certified Administrator
- Minimum 6-8 years of relevant market experience
- Minimum 2-3 years of experience working with Splunk ITSI
- Splunk Architect Certification or higher
- ITSI certifcation
- Experience designing and implementing ground up distributed Splunk ITSI installations
- Experience with advanced configuration of Splunk ITSI (including Entity Integrations, Service Insights, and Event Analytics)
- Experience maintaining and administering enterprise Splunk ITSI
- Experience developing custom ITSI Glass Tables
- Enterprise experience working with large teams or collaborative environments
- Experience working in linux and windows environments, ability to configure:
- Storage subsystems (I.e. partitioning, Volume Groups, Logical Volumes, etc.)
- SELinux and FAPolicyd
- Familiarity with different flavors of Linux distros (RedHat, CentOS, Ubuntu, etc.)
- File Permission Settings (linux/windows)
- Excellent written and oral skills, ability to work closely with multiple customers, manage expectations, and track engagement scope.
Preferred Qualifications
- Splunk Core Consultant Certification
- Adept at extracting value from data and establishing security use cases
- Proficient in establishing standardized practices and documentation
- Possess an understanding of Syslog daemon configuration principles, ideally in Syslog-NG and RSyslog configurations.
- Cloud experience (AWS, Azure, etc.)
- Cribl Experience, working with source/destination definitions, pipelines and PACKS, as well as experience writing regular expressions and building routes
- Experience with Government CDM Programs
- Familiarity with the aggregation tool Axonius
- Development and API experience (Python, Perl, XML)
- Ansible, Spacewalk, and other enterprise automation tool experience.
- Hardware experience and storage experience (SAN, NAS, etc.)
U.S. Citizenship is required as this is in support of a Federal Customer.
We’re actively searching for talented security and technology practitioners who are ready to experience the True Zero difference. As a True Zero team member, you'll enjoy:
- Competitive salary, paid twice per month
- Best in class medical coverage
- 100% of medical premiums covered by True Zero
- Company wide new business incentive programs
- Contribution Incentives (i.e. white papers, blog posts, internal webinars, etc.)
- 3 weeks of PTO starting + 11 Paid Holidays Annually
- 401k Program with 100% company match on the first 4%
- Monthly reimbursement of Cell Phone and Home Internet costs
- Paternity/Maternity Leave
- Investment in training and certifications to broaden and deepen your technical skills
Top Skills
Ansible
AWS
Axonius
Cribl
Linux
Perl
Python
Rsyslog
Splunk Itsi
Syslog
Windows
XML
Similar Jobs
Cloud • Fintech • Software • Business Intelligence • Consulting • Financial Services
The Senior Consultant will lead and deliver Microsoft D365 CRM solutions, manage client projects, and participate in business development activities.
Top Skills:
DevOpsJIRAMicrosoft D365 Crm
Artificial Intelligence • Machine Learning • Software • Defense
The Senior Search Engineer will focus on improving the search system for Vannevar's product, collaborating with engineers to leverage full-text search and emerging technologies, and enhancing user experience by improving search latency and relevance.
Top Skills:
ElasticsearchLlmsLuceneNlpSearch TechnologiesVector Databases
Artificial Intelligence • Marketing Tech • Software • Generative AI • Automation
Lead and inspire a remote team of software engineers, managing technical execution and collaboration to deliver impactful AI features.
Top Skills:
Nestjs FrameworkNode.jsPythonReactTypescript
What you need to know about the Chicago Tech Scene
With vibrant neighborhoods, great food and more affordable housing than either coast, Chicago might be the most liveable major tech hub. It is the birthplace of modern commodities and futures trading, a national hub for logistics and commerce, and home to the American Medical Association and the American Bar Association. This diverse blend of industry influences has helped Chicago emerge as a major player in verticals like fintech, biotechnology, legal tech, e-commerce and logistics technology. It’s also a major hiring center for tech companies on both coasts.
Key Facts About Chicago Tech
- Number of Tech Workers: 245,800; 5.2% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: McDonald’s, John Deere, Boeing, Morningstar
- Key Industries: Artificial intelligence, biotechnology, fintech, software, logistics technology
- Funding Landscape: $2.5 billion in venture capital funding in 2024 (Pitchbook)
- Notable Investors: Pritzker Group Venture Capital, Arch Venture Partners, MATH Venture Partners, Jump Capital, Hyde Park Venture Partners
- Research Centers and Universities: Northwestern University, University of Chicago, University of Illinois Urbana-Champaign, Illinois Institute of Technology, Argonne National Laboratory, Fermi National Accelerator Laboratory
