SPLUNK NETWORK & OBSERVABILITY ARCHITECT

This role requires a strong foundation in Cisco and Juniper networking, combined with hands-on experience designing and implementing Splunk solutions., * Design, implement, and optimize Splunk IT Service Intelligence (ITSI) solutions to support Network Operations Center (NOC) activities.

• Develop ITSI services, Key Performance Indicators (KPIs), glass tables, and episode review workflows to improve network monitoring and incident response.
• Utilize Splunk Observability Cloud to monitor infrastructure performance through metrics, logs, and traces.
• Configure OpenTelemetry collectors and develop SignalFlow analytics.
• Integrate network telemetry from Cisco and Juniper routers, switches, firewalls, and other infrastructure.
• Collect, analyze, and optimize NetFlow/IPFIX, SNMP, syslog, streaming telemetry, and Cisco Secure Network Analytics (SNA) data.
• Map network data to the Splunk Common Information Model (CIM) to support Enterprise Security detections and risk-based alerting.
• Develop efficient data ingestion strategies using filtering, aggregation, and summarization to manage Splunk Virtual Compute (SVC) consumption.
• Configure and maintain Splunk Technical Add-ons (TAs), HTTP Event Collector (HEC), and forwarders.
• Monitor Splunk Cloud performance, indexing volumes, and search workloads.
• Collaborate with network engineering, security operations, and enterprise detection teams to improve operational efficiency.
• Maximize the value of existing tools and technologies while identifying opportunities for continuous improvement.

• Extensive hands-on experience with enterprise networking, particularly Cisco and Juniper routing, switching, and firewall technologies.
• Advanced networking knowledge equivalent to CCNP or JNCIP level.
• Demonstrated experience designing and implementing Splunk IT Service Intelligence (ITSI) solutions.
• Hands-on experience developing ITSI services, KPIs, glass tables, and episode review workflows.
• Experience with Splunk Observability Cloud, including metrics, logs, traces, and SignalFlow.
• Experience configuring and managing OpenTelemetry collectors.
• Strong understanding of network telemetry protocols, including NetFlow/IPFIX, SNMP, syslog, and streaming telemetry.
• Familiarity with Cisco Secure Network Analytics (SNA).
• Experience with Splunk Cloud administration and performance optimization.
• Knowledge of Splunk Common Information Model (CIM) and its application to security analytics.
• Experience with AWS or Microsoft Azure.
• Ability to troubleshoot complex network and monitoring issues.
• Strong analytical, communication, and problem-solving skills.
• Must be eligible to obtain a Public Trust clearance.

Preferred Certifications

• Splunk Enterprise Certified Architect
• Splunk ITSI or Splunk Observability certification
• Cisco Certified Network Professional (CCNP)
• Juniper Networks Certified Internet Professional (JNCIP) or equivalent

Preferred Experience

• Python scripting and network automation.
• Cisco ThousandEyes.
• Splunk Edge Processor or Ingest Processor.
• Experience supporting federal civilian agencies.
• Familiarity with Splunk Enterprise Security and risk-based alerting.
• Experience managing high-volume network telemetry in large enterprise environments.

• 401(k)
• Dental insurance
• Flexible spending account
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Retirement plan